CVE-2023-39227

​Softneta MedDream PACS stores usernames and passwords in plaintext. The plaintext storage could be abused by attackers to leak legitimate user’s credentials...

CVE-2023-39227 ​Softneta MedDream PACS Plaintext Storage of a Password

​Softneta MedDream PACS stores usernames and passwords in plaintext. The plaintext storage could be abused by attackers to leak legitimate user’s credentials...

CVE-2023-39227

CVE-2023-39227 affects Softneta MedDream PACS; the issue is plaintext storage of usernames and passwords (CWE-256) leading to credential leakage. Connected docs identify affected product and versions: MedDream PACS v7.2.8.810 and earlier. The root cause is insecure plaintext credential storage wi...

Softneta MedDream PACS Premium

1. EXECUTIVE SUMMARY ​CVSS v3 9.8 ​ATTENTION: Exploitable remotely/low attack complexity ​Vendor: Softneta ​Equipment: MedDream PACS ​Vulnerabilities: Exposed Dangerous Method or Function, Plaintext Storage of a Password 2. RISK EVALUATION ​Successful exploitation of these vulnerabilities could...