TI-2018-11207 CVE-2018-15719 · GHSA-25p5-wc7c-qrrg
Credentials management flaw in Open Dental
Priority MEDIUM 45
Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password.
Vulnerabilities
4 records
TI-2018-11206 CVE-2018-15718 · GHSA-jjx7-7x6r-xgfp
Information disclosure in Open Dental
Priority LOW 36
Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt.
TI-2018-11205 CVE-2018-15717 · GHSA-vxh8-h4fx-wwhc
Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes.
Priority LOW 25
Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes.
TI-2016-05596 CVE-2016-6531 · GHSA-7j86-635w-m5fj
Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows remote…
Priority MEDIUM 54
Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows remote attackers to obtain administrative access by leveraging access to intranet TCP port 3306.