The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET. The identifier is exposed through a built-in Windows security feature that stores additional metadata in an NTFS alternate data stream (ADS) for all files downloaded from potentially untrusted sources.
Exploitability
AV:AAC:LAT:PPR:HUI:AVulnerable System
VC:HVI:HVA:HSubsequent System
SC:HSI:HSA:H7.3/CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:HOther