Lucene search

CertccCVE-2016-4328

HistoryJun 10, 2016 - 1:59 a.m.

CVE-2016-4328

2016-06-1001:59:07

certcc

web.nvd.nist.gov

cve-2016-4328

medhost

pims

hardcoded credentials

remote attack

sensitive information

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.004

Percentile

73.6%

JSON

MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credentials, which makes it easier for remote attackers to obtain sensitive information via direct requests to the application database server.

Affected configurations

Nvd

Node

medhostperioperative_information_management_systemMatch-

VendorProductVersionCPE
medhostperioperative_information_management_system-cpe:2.3:a:medhost:perioperative_information_management_system:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
medhost	perioperative_information_management_system	-	cpe:2.3:a:medhost:perioperative_information_management_system:-:::::::*

References

www.kb.cert.org/vuls/id/482135

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.004

Percentile

73.6%

JSON

Related for CVE-2016-4328