EUVD-2018-7588

Malware in sbrugna...

EUVD-2018-7589

Malware in sbrugna...

EUVD-2018-7587

Malware in sbrugna...

Default credentials

Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information...

CVE-2018-15718

Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more...

CVE-2018-15719

Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information...

CVE-2018-15718

Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more...

Open redirect

Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more...

CVE-2018-15717

Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes...

CVE-2018-15719

Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information...

CVE-2018-15717

Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes...

CVE-2018-15719

Open Dental before version 18.4 ships with a MySQL database and uses default credentials of root with a blank password, enabling anyone on the network with access to the server to access all database information. Remediate by upgrading to version 18.4 or later (details in provided sources).

CVE-2018-15718

Open Dental prior to version 18.4 is affected by CVE-2018-15718. The issue occurs when a remote unauthenticated user accesses the command prompt, causing the application to transmit the entire user database over the network. This can expose usernames, password hashes, privilege levels, and other ...

CVE-2018-15717

Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes...

CVE-2018-15717

Open Dental before version 18.4 stores user passwords as base64-encoded MD5 hashes, a weak hashing method exposing credentials if hashes are exposed. The affected software is Open Dental, with the cutoff version noted as pre-18.4. The CVE entry indicates the vulnerability’s existence but does not...

CVE-2018-15718

Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more...

CVE-2018-15719

Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information...

CVE-2018-15717: Use of Password Hash With Insufficient Computational Effort

Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes...

PT-2018-13167

Name of the Vulnerable Software and Affected Versions Open Dental versions prior to 18.4 Description The issue concerns the storage of user passwords in a insecure manner, specifically as base64 encoded MD5 hashes. Recommendations For versions prior to 18.4, update to version 18.4 or later to...

PT-2018-13168

Name of the Vulnerable Software and Affected Versions Open Dental versions prior to 18.4 Description The issue allows an unauthenticated remote user to access the command prompt, resulting in the transmission of the entire user database over the network. This exposes sensitive information,...