PT-2016-5889
CVE-2016-4328
·
Published
2016-06-10
·
Updated
2016-06-10
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
MEDHOST Perioperative Information Management System versions prior to 2015R1
Description
The issue allows remote attackers to obtain sensitive information via direct requests to the application database server due to hardcoded credentials.
Recommendations
For versions prior to 2015R1, update to version 2015R1 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾