Skip to content
Pesquise para saber mais sobre produtos e soluções da InterSystems, oportunidades de carreira e muito mais.

Advisory: PIX Manager Process Causes Requests to Be Associated with Wrong User

This problem affects the following products:

  • HealthShare Unified Care Record®: all versions up to and including 2024.2

Requirements:

  • IHE customers who use the PIX manager

The MergePatientv3() method in HS.IHE.PIX.Manager.Process does not add any SAML information to requests. This means that merge requests from the service become associated with the default user _Ensemble. This prevents downstream components, such as post-processors, from correctly evaluating users or roles.

The root cause of this is that MergePatientv3() does not call the RequestInfoToXMLMessage() method in HS.Types.RequestInfo, which adds the SAML information to the request.

The correction for this defect is identified as HSIEC-11050, which is included in version 2025.1 and all future product releases. It is also available for older versions via ad hoc change file (patch) or full kit distribution by contacting the Worldwide Response Center (WRC).

RELATED TOPICS

Latest Alerts & Advisories

out. 10, 2025
This alert supersedes the version issued on October 7, 2025. The original alert listed incorrect affected and fixed versions.
out. 07, 2025
Risk Category & Score Explicit Requirements DP-443396 InterSystems IRIS® data platform InterSystems IRIS® for Health HealthShare® Health Connect versions 2024.1.0 – 2024.1.4, 2024.2.0, 2024.3.0, and 2025.1.0, and 2025.1.1 HealthShare® Unified Care Record versions 2024.2 and 2025.1 Wrong Results: Low Risk Using Common Table Expressions in Dynamic SQL
out. 07, 2025
Risk Category & Score Explicit Requirements HSHC-5268 HealthShare® Health Connect and InterSystems IRIS® for Health versions 2025.1.1 Functional: Medium Risk Occurs when performing SDA3 -> FHIR transformations involving the Encounter resource.
out. 07, 2025
This alert has been corrected - please see: October 10 - Correction Notice: Updated Alert for DP-442892
set. 30, 2025
In InterSystems IRIS, InterSystems IRIS for Health, and HealthShare Health Connect, versions 2025.1.1 and 2025.2.0, the new “ Mirror Database Download” functionality does not include certain globals.
set. 24, 2025
Risk Category & Score Explicit Requirements DP-444551 InterSystems IRIS® data platform InterSystems IRIS® for Health HealthShare® Health Connect versions 2025.1.0, 2025.1.1, and 2025.2
set. 03, 2025
Risk Category & Score Explicit Requirements DP-442440 InterSystems IRIS ® data platform 2025.1.1.308.0 InterSystems IRIS for Health HealthShare® Health Connect Operational:
jul. 23, 2025
InterSystems IRIS 2025.2 introduces the IRISSECURITY database, the new home for security data. Unlike IRISSYS, the previous home for security data, IRISSECURITY can be encrypted, which secures your sensitive data at rest. In a future version, IRISSECURITY will be mirrorable.
jul. 23, 2025
InterSystems is pleased to announce the General Availability (GA) of the 2025.2 release of InterSystems IRIS® data platform. This is a Continuous Delivery (CD) release. Please note that the GA versions of InterSystems IRIS for Health™ and HealthShare® Health Connect™ 2025.2 are currently withheld due to mirroring limitations introduced by security updates (details below).
jun. 10, 2025
Advisory ID Product & Versions Affected Risk Category & Score Explicit Requirements DP-439649 Products: