mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-08-04 08:44:25 +00:00
81 lines
2.7 KiB
JSON
81 lines
2.7 KiB
JSON
{
|
|
"data_version": "4.0",
|
|
"data_type": "CVE",
|
|
"data_format": "MITRE",
|
|
"CVE_data_meta": {
|
|
"ID": "CVE-2024-1228",
|
|
"ASSIGNER": "cvd@cert.pl",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all Eurosoft Przychodnia installations.\n\nThis issue affects Eurosoft Przychodnia software before\u00a0version\u00a020240417.001 (from that version vulnerability is fixed)."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "CWE-798 Use of Hard-coded Credentials",
|
|
"cweId": "CWE-798"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"vendor_name": "EuroSoft Sp. z o. o.",
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "Eurosoft Przychodnia",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "<",
|
|
"version_name": "0",
|
|
"version_value": "20240417.001"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"url": "https://cert.pl/en/posts/2024/06/CVE-2024-1228/",
|
|
"refsource": "MISC",
|
|
"name": "https://cert.pl/en/posts/2024/06/CVE-2024-1228/"
|
|
},
|
|
{
|
|
"url": "https://cert.pl/posts/2024/06/CVE-2024-1228/",
|
|
"refsource": "MISC",
|
|
"name": "https://cert.pl/posts/2024/06/CVE-2024-1228/"
|
|
},
|
|
{
|
|
"url": "https://www.eurosoft.com.pl/eurosoft-przychodnia",
|
|
"refsource": "MISC",
|
|
"name": "https://www.eurosoft.com.pl/eurosoft-przychodnia"
|
|
}
|
|
]
|
|
},
|
|
"generator": {
|
|
"engine": "Vulnogram 0.1.0-dev"
|
|
},
|
|
"source": {
|
|
"discovery": "UNKNOWN"
|
|
}
|
|
} |