Описание
Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 18.4 (исключая)
cpe:2.3:a:opendental:opendental:*:*:*:*:*:*:*:*
EPSS
Процентиль: 61%
0.00412
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-200
CWE-200
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more.
EPSS
Процентиль: 61%
0.00412
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-200
CWE-200