PT-2016-6976
CVE-2016-6532
·
Published
2016-09-24
·
Updated
2016-11-28
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
DEXIS Imaging Suite version 10
Description
The issue allows remote attackers to gain administrative access by using a hardcoded password for the sa account in a DEXIS DATA SQL Server session.
Recommendations
For DEXIS Imaging Suite version 10, change the hardcoded password for the sa account to a unique and secure password to prevent unauthorized access.
Found an issue in the description? Have something to add? Feel free to write us 👾