Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
2 vulnerabilities by dentrix
CVE-2012-4952 (GCVE-0-2012-4952)
Vulnerability from nvd – Published: 2013-05-01 10:00 – Updated: 2024-09-16 19:37
VLAI
EPSS
VEX
Summary
Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different customers' installations, which allows remote attackers to obtain sensitive information about patients by leveraging knowledge of this password from another installation.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| http://www.dentrix.com/support/software-updates/g5.aspx | x_refsource_CONFIRM |
| http://www.kb.cert.org/vuls/id/JALR-8ZRHUK | x_refsource_CONFIRM |
| http://www.kb.cert.org/vuls/id/948155 | third-party-advisoryx_refsource_CERT-VN |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T20:50:18.259Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.dentrix.com/support/software-updates/g5.aspx"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/JALR-8ZRHUK"
},
{
"name": "VU#948155",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/948155"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different customers\u0027 installations, which allows remote attackers to obtain sensitive information about patients by leveraging knowledge of this password from another installation."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2013-05-01T10:00:00.000Z",
"orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"shortName": "certcc"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.dentrix.com/support/software-updates/g5.aspx"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.kb.cert.org/vuls/id/JALR-8ZRHUK"
},
{
"name": "VU#948155",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/948155"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cert@cert.org",
"ID": "CVE-2012-4952",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different customers\u0027 installations, which allows remote attackers to obtain sensitive information about patients by leveraging knowledge of this password from another installation."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.dentrix.com/support/software-updates/g5.aspx",
"refsource": "CONFIRM",
"url": "http://www.dentrix.com/support/software-updates/g5.aspx"
},
{
"name": "http://www.kb.cert.org/vuls/id/JALR-8ZRHUK",
"refsource": "CONFIRM",
"url": "http://www.kb.cert.org/vuls/id/JALR-8ZRHUK"
},
{
"name": "VU#948155",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/948155"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"assignerShortName": "certcc",
"cveId": "CVE-2012-4952",
"datePublished": "2013-05-01T10:00:00.000Z",
"dateReserved": "2012-09-17T00:00:00.000Z",
"dateUpdated": "2024-09-16T19:37:04.769Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2012-4952 (GCVE-0-2012-4952)
Vulnerability from cvelistv5 – Published: 2013-05-01 10:00 – Updated: 2024-09-16 19:37
VLAI
EPSS
VEX
Summary
Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different customers' installations, which allows remote attackers to obtain sensitive information about patients by leveraging knowledge of this password from another installation.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| http://www.dentrix.com/support/software-updates/g5.aspx | x_refsource_CONFIRM |
| http://www.kb.cert.org/vuls/id/JALR-8ZRHUK | x_refsource_CONFIRM |
| http://www.kb.cert.org/vuls/id/948155 | third-party-advisoryx_refsource_CERT-VN |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T20:50:18.259Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.dentrix.com/support/software-updates/g5.aspx"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/JALR-8ZRHUK"
},
{
"name": "VU#948155",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/948155"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different customers\u0027 installations, which allows remote attackers to obtain sensitive information about patients by leveraging knowledge of this password from another installation."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2013-05-01T10:00:00.000Z",
"orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"shortName": "certcc"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.dentrix.com/support/software-updates/g5.aspx"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.kb.cert.org/vuls/id/JALR-8ZRHUK"
},
{
"name": "VU#948155",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/948155"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cert@cert.org",
"ID": "CVE-2012-4952",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different customers\u0027 installations, which allows remote attackers to obtain sensitive information about patients by leveraging knowledge of this password from another installation."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.dentrix.com/support/software-updates/g5.aspx",
"refsource": "CONFIRM",
"url": "http://www.dentrix.com/support/software-updates/g5.aspx"
},
{
"name": "http://www.kb.cert.org/vuls/id/JALR-8ZRHUK",
"refsource": "CONFIRM",
"url": "http://www.kb.cert.org/vuls/id/JALR-8ZRHUK"
},
{
"name": "VU#948155",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/948155"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"assignerShortName": "certcc",
"cveId": "CVE-2012-4952",
"datePublished": "2013-05-01T10:00:00.000Z",
"dateReserved": "2012-09-17T00:00:00.000Z",
"dateUpdated": "2024-09-16T19:37:04.769Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}