Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Docutracinc Component: Dtisqlinstaller Clear all filters
TI-2018-04057 CVE-2018-5552 · GHSA-f34m-7xrj-gp7h

DocuTrac DTISQLInstaller.exe Hard-Coded Salt

Priority LOW 15

Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a hard-coded cryptographic salt, "S@l+&pepper".

CVSS 3.0LOW 3.3 Local Low privileges No interaction EPSS 0.00209 Published 2018-03-19 No fix listed CWE-760
TI-2018-04056 CVE-2018-5551 · GHSA-4qpp-m6mp-8jj7

DocuTrac DTISQLInstaller.exe Hard-Coded Credentials

Priority MEDIUM 46

Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contain three credentials with known passwords: QDMaster, OTMaster, and sa.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0161 Published 2018-03-19 No fix listed CWE-798