CVE Catalog
CVE-2016-2343
CriticalSummary
Patterson Dental Eaglesoft 17 has a hardcoded password of 'sql' for the dba account, allowing remote attackers to obtain sensitive Dental.DB patient information via SQL statements.
Risk Assessment
Exploitation of this vulnerability could lead to the disclosure of confidential patient data, posing a serious threat to privacy and data security within the organization.
Recommendation
It is recommended to change the password for the dba account and implement additional security measures to prevent remote access to the database.
Original NVD description (English source)
Patterson Dental Eaglesoft 17 has a hardcoded password of sql for the dba account, which allows remote attackers to obtain sensitive Dental.DB patient information via SQL statements.