CVE-2017-11694

The MEDHOST Document Management System contains hard-coded credentials used for Apache Solr access (account name: dms). This password is embedded throughout the application, identical across installations, and cannot be changed by customers. An attacker who knows these credentials and can connect...

CVE-2017-11693

CVE-2017-11693 affects MEDHOST Document Management System. Connected sources confirm a hard-coded credential (dms) used for PostgreSQL access, with the password identical across installations. This grants direct database access to the DMS schema and can lead to exposure or modification of patient...