PT-2005-3213 · Esi · Webeoc

Jeff Gennari · Published 2005-07-17 · Updated 2008-09-05 · CVE-2005-2285

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: WebEOC versions prior to 6.0.2

Description: The issue allows remote attackers to obtain sensitive information, including usernames, passwords, emergency information, medical information, and system configuration, which is stored in locations such as URIs, web pages, and configuration files.

Recommendations: For versions prior to 6.0.2, update to version 6.0.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-2285

Affected Products

Webeoc

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-2285 · Security Note
• http://kb.cert.org/vuls/id/165290 · Patch
• http://kb.cert.org/vuls/id/JGEI-6BWPXL · Note