PT-2018-13168 · Open Dental · Open Dental

Publicado 2018-12-12 · Atualizado 2019-10-09 · CVE-2018-15718

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Open Dental versions prior to 18.4

Description The issue allows an unauthenticated remote user to access the command prompt, resulting in the transmission of the entire user database over the network. This exposes sensitive information, including usernames, password hashes, and privilege levels.

Recommendations For versions prior to 18.4, update to version 18.4 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-15718

Produtos afetados

Open Dental

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-15718 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-15718 · Nota de Segurança
• https://tenable.com/security/research/tra-2018-44 · Nota