CVE Catalog
CVE-2016-6532
CriticalSummary
DEXIS Imaging Suite 10 has a hardcoded password for the sa account, allowing remote attackers to gain administrative access by entering this password in a DEXIS_DATA SQL Server session.
Risk Assessment
The organization is exposed to unauthorized access to the system, which may lead to serious data security breaches.
Recommendation
It is recommended to remove the hardcoded password and implement strong authentication mechanisms for the sa account.
Original NVD description (English source)
DEXIS Imaging Suite 10 has a hardcoded password for the sa account, which allows remote attackers to obtain administrative access by entering this password in a DEXIS_DATA SQL Server session.