CVE-2018-15718

Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more.

Score

CVSS 3.0 7.5 High

Status

Modified - vulnreport@tenable.com

Published

2018-12-12

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Open Dental (Open Dental)
• Opendental (Opendental)

References

• https://www.tenable.com/security/research/tra-2018-44