PT-2016-5122 · Patterson Dental · Patterson Dental Eaglesoft

Justin Shafer · Publicado 2016-04-01 · Atualizado 2016-04-04 · CVE-2016-2343

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Patterson Dental Eaglesoft version 17

Description The issue allows remote attackers to obtain sensitive patient information from the Dental.DB database. This is possible due to a hardcoded password for the dba account, which is set to sql. Attackers can exploit this by sending SQL statements to access the sensitive data.

Recommendations For Patterson Dental Eaglesoft version 17, change the hardcoded password of the dba account to a secure password to prevent unauthorized access. As a temporary workaround, consider restricting access to the database to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2016-2343

Produtos afetados

Patterson Dental Eaglesoft

Referências · 4

• http://kb.cert.org/vuls/id/344432 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-2343 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-2343 · Aviso do Fabricante
• http://justinshafer.blogspot.com/2016/02/moving-onto-eaglesoft-aka-patterson.html · Nota