Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-4952
cve-2012-4952
henry schein dentrix g5
password vulnerability
sensitive information disclosure
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.8%
Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different customers’ installations, which allows remote attackers to obtain sensitive information about patients by leveraging knowledge of this password from another installation.
Affected configurations
Node
dentrixg5Range≤15.1.293
| CPE | Name | Operator | Version |
|---|---|---|---|
| dentrix:g5 | dentrix g5 | le | 15.1.293 |
Related
prion
prion
Information disclosure
2013-05-01 12:00:00
nvd
nvd
CVE-2012-4952
2013-05-01 12:00:07
cert
cert
cvelist
cvelist
CVE-2012-4952
2022-10-03 16:15:33
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.8%
Related for CVE-2012-4952