Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-35193

Опубликовано: 30 июл. 2021
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across different customers' installations (that have the same software version). This provides remote access to SQL database credentials. (In the normal use of the product, retrieving those credentials only occurs after a username/password authentication step; however, this authentication step is on the client side, and an attacker can develop their own client that skips this step.)

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:pattersondental:eaglesoft:*:*:*:*:*:*:*:*
Версия от 18.0 (включая) до 21.0 (включая)

EPSS

Процентиль: 38%
0.00165
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-295

Связанные уязвимости

github
больше 3 лет назад

Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across different customers' installations (that have the same software version). This provides remote access to SQL database credentials. (In the normal use of the product, retrieving those credentials only occurs after a username/password authentication step; however, this authentication step is on the client side, and an attacker can develop their own client that skips this step.)

EPSS

Процентиль: 38%
0.00165
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-295