Hardcoded credentials

2018-03-1915:29:00

PRIOn knowledge base

www.prio-n.com

4.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.9%

JSON

Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a hard-coded cryptographic salt, “S@l+&pepper”.

CPENameOperatorVersion
dtisqlinstallerle1.6.4.0

CPE	Name	Operator	Version
	dtisqlinstaller	le	1.6.4.0

References

blog.rapid7.com/2018/03/14/r7-2018-01-cve-2018-5551-cve-2018-5552-docutrac-office-therapy-installer-hard-coded-credentials-and-cryptographic-salt/