CVE-2001-1546

Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2001-12-31

Last modified

2025-01-16

Weaknesses

CWE-326

Affected products

• Pathways Homecare (Mckesson)

References

• http://www.iss.net/security_center/static/7682.php
• http://www.securityfocus.com/archive/1/244367
• http://www.securityfocus.com/bid/3653