CVE-2016-4328

Critical

Published: 10/06/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

MEDHOST Perioperative Information Management System (PIMS or VPIMS) before version 2015R1 has hardcoded credentials, making it easier for remote attackers to obtain sensitive information via direct requests to the application database server.

Risk Assessment

This vulnerability exposes organizations to the risk of sensitive data leakage, which can lead to serious legal and reputational consequences.

Recommendation

It is recommended to update the system to version 2015R1 or later and to remove hardcoded credentials.

Original NVD description (English source)

MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credentials, which makes it easier for remote attackers to obtain sensitive information via direct requests to the application database server.