CVE:CVE-2014-0348
CNNVD:CNNVD-201404-203
Artiva Workstation等产品都是美国Ontario Systems公司的用于医疗保健行业的产品。Artiva Workstation是一款允许用户访问Artiva医疗系统的工作站。Artiva Healthcare是一套医疗服务工具。
多款Artiva产品的Artiva Agency Single Sign-On (SSO)功能中存在安全漏洞。当使用domain-name选项时，远程攻击者可通过在Windows客户端机器上使用相应的用户名利用该漏洞登录任意域账户。以下版本受到影响：Artiva Workstation 1.3.0版本，Artiva Rm 3.1 MR7版本，Artiva Healthcare 5.2 MR5版本，Artiva Architect 3.2 MR5版本。
solution:Upgrade ontariosystems artiva_architect to a higher version than 3.2:mr5,and avoid the version 3.2:mr5; Upgrade ontariosystems artiva_healthcare to a higher version than 5.2:mr5,and avoid the version 5.2:mr5; Upgrade ontariosystems artiva_rm to a higher version than 3.1:mr7,and avoid the version 3.1:mr7; Upgrade ontariosystems artiva_workstation to a higher version than 1.3.0,and avoid the version 1.3.0