PT-2018-13169 · Open Dental · Open Dental

Publicado 2018-12-12 · Atualizado 2019-10-09 · CVE-2018-15719

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open Dental versions prior to 18.4

Description The issue allows unauthorized access to database information due to the use of default credentials. Specifically, the mysql database is installed with the default credentials of root and a blank password, potentially exposing all database information to anyone on the network with access to the server.

Recommendations For versions prior to 18.4, update to version 18.4 or later to resolve the issue. As a temporary workaround, consider changing the default database credentials to secure ones, restricting access to the database server, and limiting network access to the server to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-521

CWE-255

Identificadores relacionados

CVE-2018-15719

Produtos afetados

Open Dental

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-15719 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-15719 · Nota de Segurança
• https://tenable.com/security/research/tra-2018-44 · Nota