CVE-2016-2343

Patterson Dental Eaglesoft 17 has a hardcoded password of sql for the dba account, which allows remote attackers to obtain sensitive Dental.DB patient information via SQL statements.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cret@cert.org

Published

2016-04-01

Last modified

2024-08-05

Affected products

• Eaglesoft (Patterson Dental)

References

• http://justinshafer.blogspot.com/2016/02/moving-onto-eaglesoft-aka-patterson.html
• http://www.kb.cert.org/vuls/id/344432