CVE-2012-4952

Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different customers' installations, which allows remote attackers to obtain sensitive information about patients by leveraging knowledge of this password from another installation...

CVE-2012-4952

CVE-2012-4952 affects Henry Schein Dentrix G5 prior to 15.1.294. The root cause is a hard-coded internal database password shared across multiple installations, enabling an attacker who obtains credentials from one site to access databases at other sites. The impact is potential disclosure of sen...

Henry Schein Dentrix G5 uses hard-coded database credentials shared across multiple installations

Overview Henry Schein Dentrix G5, a dental practice management software suite, uses hard-coded database access credentials that are shared across multiple installation sites. An attacker who is able to obtain the credentials for one site may be able to gain access to other sites using the same...