CVE-2022-1067: Lifepoint Patient Portal

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting.

Affected products

• Lifepoint Patient Portal: before lpi_3.5.12.p30 (fixed in lpi_3.5.12.p30)

Published 2022-04-11. Last modified 2026-06-17.