CVE-2017-11694

Name of the Vulnerable Software and Affected Versions MEDHOST Document Management System (affected versions not specified)

Description The MEDHOST Document Management System contains hard-coded credentials for Apache Solr access. An attacker with knowledge of these credentials and direct communication with Apache Solr may obtain or modify sensitive patient and financial information. The Apache Solr account name is dms, and the password is hard-coded and uniform across all installations, with no option for customers to change it. This dms account has access to all indexed patient documents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.