PT-2013-1736 · Henry Schein · Dentrix G5

Justin Shafer · Publicado 2013-05-01 · Atualizado 2013-05-21 · CVE-2012-4952

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Henry Schein Dentrix G5 versions prior to 15.1.294

Description The issue allows remote attackers to obtain sensitive patient information by exploiting a shared internal-database password across different customers' installations.

Recommendations For versions prior to 15.1.294, update to version 15.1.294 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2012-4952

Produtos afetados

Dentrix G5

Referências · 4

• http://kb.cert.org/vuls/id/JALR-8ZRHUK · Nota
• http://kb.cert.org/vuls/id/948155 · Nota
• http://dentrix.com/support/software-updates/g5.aspx · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-4952 · Nota de Segurança