TI-2024-03450 CVE-2024-3699 · GHSA-j37r-fj8f-2g89
Hardcoded password in drEryk Gabinet
Priority MEDIUM 42
Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database.
No drEryk vulnerabilities are listed in CISA KEV.
2 records
Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database.
DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component.