PT-2013-1736 · Henry Schein · Dentrix G5

Justin Shafer · Published 2013-05-01 · Updated 2013-05-21 · CVE-2012-4952

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Henry Schein Dentrix G5 versions prior to 15.1.294

Description The issue allows remote attackers to obtain sensitive patient information by exploiting a shared internal-database password across different customers' installations.

Recommendations For versions prior to 15.1.294, update to version 15.1.294 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2012-4952

Affected Products

Dentrix G5

References · 4

• http://dentrix.com/support/software-updates/g5.aspx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-4952 · Security Note
• http://kb.cert.org/vuls/id/JALR-8ZRHUK · Note
• http://kb.cert.org/vuls/id/948155 · Note