Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j37r-fj8f-2g89

Опубликовано: 10 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 9.3
CVSS3: 9.8

Описание

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all drEryk Gabinet installations.This issue affects drEryk Gabinet software versions from 7.0.0.0 through 9.17.0.0.

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all drEryk Gabinet installations.This issue affects drEryk Gabinet software versions from 7.0.0.0 through 9.17.0.0.

EPSS

Процентиль: 32%
0.00126
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-259
CWE-798

Связанные уязвимости

CVSS3: 9.8
nvd
больше 1 года назад

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all drEryk Gabinet installations.This issue affects drEryk Gabinet software versions from 7.0.0.0 through 9.17.0.0.

EPSS

Процентиль: 32%
0.00126
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-259
CWE-798