Medhost · Medhost Document Management System · CVE-2017-11694
**Name of the Vulnerable Software and Affected Versions**
MEDHOST Document Management System (affected versions not specified)
**Description**
The MEDHOST Document Management System contains hard-coded credentials for Apache Solr access. An attacker with knowledge of these credentials and direct communication with Apache Solr may obtain or modify sensitive patient and financial information. The Apache Solr account name is `dms`, and the password is hard-coded and uniform across all installations, with no option for customers to change it. This `dms` account has access to all indexed patient documents.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.