THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2024-1228

Hardcoded password in Eurosoft Przychodnia

Reserved:2024-02-05
Published:2024-06-10
Updated:2024-06-11

Description

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all Eurosoft Przychodnia installations. This issue affects Eurosoft Przychodnia software before version 20240417.001 (from that version vulnerability is fixed).



CRITICAL: 9.3CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:H/SA:H/AU:Y/R:U/V:C/RE:M/U:Red

Problem types

CWE-798 Use of Hard-coded Credentials

Product status

Default status
unaffected

Any version before 20240417.001
affected

References

https://cert.pl/en/posts/2024/06/CVE-2024-1228/ third-party-advisory

https://cert.pl/posts/2024/06/CVE-2024-1228/ third-party-advisory

https://www.eurosoft.com.pl/eurosoft-przychodnia product

cve.org CVE-2024-1228

nvd.nist.gov CVE-2024-1228

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-1228