CVE-2012-4952 Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different customers' installations, which allows remote attackers to obtain sensitive information....
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different customers' installations, which allows remote attackers to obtain sensitive information about patients by leveraging knowledge of this password from another installation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dentrix g5 | <= 15.1.293 | No fix listed |
References
- www.dentrix.com vendor-advisory
- VU#948155 third-party-advisory us-government-resource
- www.kb.cert.org us-government-resource