PT-2016-6975 · Open Dental · Open Dental

Justin Shafer · Publicado 2016-09-24 · Atualizado 2024-08-06 · CVE-2016-6531

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open Dental versions 16.1 and earlier

Description The issue concerns a hardcoded MySQL root password, which could allow remote attackers to gain administrative access by leveraging access to intranet TCP port 3306. The vendor disputes this issue, stating that the password can be changed and recommends that users do so.

Recommendations For Open Dental versions 16.1 and earlier, change the default MySQL root password to prevent potential administrative access by remote attackers.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2016-6531

Produtos afetados

Open Dental

Referências · 8

• https://t.me/cvenotify/80135 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2016-6531 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/619767 · Nota
• https://t.me/cvenotify/81979 · Publicação no Telegram
• http://kb.cert.org/vuls/id/GWAN-ACVSBM · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-6531 · Nota de Segurança
• http://securityfocus.com/bid/92780 · Nota
• https://t.me/cvenotify/89321 · Publicação no Telegram