CVE-2017-6022

Name of the Vulnerable Software and Affected Versions Becton, Dickinson and Company (BD) PerformA versions 2.0.14.0 and prior Becton, Dickinson and Company (BD) KLA Journal Service versions 1.0.51 and prior

Description A hard-coded password issue was discovered, which could be leveraged to compromise the confidentiality of limited PHI/PII information stored in the BD Kiestra Database. The issue arises because the software uses hard-coded passwords to access the database.

Recommendations For Becton, Dickinson and Company (BD) PerformA versions 2.0.14.0 and prior, consider changing the hard-coded password to a secure, user-defined password to prevent unauthorized access. For Becton, Dickinson and Company (BD) KLA Journal Service versions 1.0.51 and prior, consider changing the hard-coded password to a secure, user-defined password to prevent unauthorized access. As a temporary workaround, consider restricting access to the BD Kiestra Database until a secure password can be implemented.