CVE-2024-1228

CRITICAL

Eurosoft Przychodnia <20240417.001 - Info Disclosure

Title source: llm
STIX 2.1

Description

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all Eurosoft Przychodnia installations. This issue affects Eurosoft Przychodnia software before version 20240417.001 (from that version vulnerability is fixed).

References (3)

Scores

CVSS v3 9.8
EPSS 0.0013
EPSS Percentile 31.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-259 CWE-798
Status published
Products (1)
eurosoft/przychodnia < 20240417.001
Published Jun 10, 2024
Tracked Since Feb 18, 2026