CVE-2017-16776

CVE-2017-16776 describes an authentication bypass vulnerability in version 2.0.2 of the Conserus Workflow Intelligence application by McKesson Medical Imaging Company (now Change Healthcare). This high-severity vulnerability (CVSS 8.1) allows an attacker to bypass authentication and escalate privileges by sending a malicious HTTP GET request. An unauthenticated attacker can gain limited access to other accounts, while an authenticated attacker can achieve higher privilege access. There is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), and the CVE shows no active exploitation, community discussion, or media coverage.