CVE-2021-35193 (GCVE-0-2021-35193)

Vulnerability from cvelistv5 – Published: 2021-07-30 18:32 – Updated: 2024-08-04 00:33
VLAI?
Summary
Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across different customers' installations (that have the same software version). This provides remote access to SQL database credentials. (In the normal use of the product, retrieving those credentials only occurs after a username/password authentication step; however, this authentication step is on the client side, and an attacker can develop their own client that skips this step.)
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T00:33:51.187Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://patterson.eaglesoft.net/Home/Contact-Us"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://justinshafer.blogspot.com/2021/07/eaglesoft-18-through-21-vulnerability.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/jshafer817/Eaglesoft"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across different customers\u0027 installations (that have the same software version). This provides remote access to SQL database credentials. (In the normal use of the product, retrieving those credentials only occurs after a username/password authentication step; however, this authentication step is on the client side, and an attacker can develop their own client that skips this step.)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-30T18:32:55.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://patterson.eaglesoft.net/Home/Contact-Us"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://justinshafer.blogspot.com/2021/07/eaglesoft-18-through-21-vulnerability.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/jshafer817/Eaglesoft"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-35193",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across different customers\u0027 installations (that have the same software version). This provides remote access to SQL database credentials. (In the normal use of the product, retrieving those credentials only occurs after a username/password authentication step; however, this authentication step is on the client side, and an attacker can develop their own client that skips this step.)"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://patterson.eaglesoft.net/Home/Contact-Us",
              "refsource": "MISC",
              "url": "http://patterson.eaglesoft.net/Home/Contact-Us"
            },
            {
              "name": "https://justinshafer.blogspot.com/2021/07/eaglesoft-18-through-21-vulnerability.html",
              "refsource": "MISC",
              "url": "https://justinshafer.blogspot.com/2021/07/eaglesoft-18-through-21-vulnerability.html"
            },
            {
              "name": "https://github.com/jshafer817/Eaglesoft",
              "refsource": "MISC",
              "url": "https://github.com/jshafer817/Eaglesoft"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-35193",
    "datePublished": "2021-07-30T18:32:55.000Z",
    "dateReserved": "2021-06-21T00:00:00.000Z",
    "dateUpdated": "2024-08-04T00:33:51.187Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2021-35193",
      "date": "2026-04-25",
      "epss": "0.00165",
      "percentile": "0.37334"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:pattersondental:eaglesoft:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"18.0\", \"versionEndIncluding\": \"21.0\", \"matchCriteriaId\": \"76418DF5-4706-464C-AC67-F6F9435EE544\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across different customers\u0027 installations (that have the same software version). This provides remote access to SQL database credentials. (In the normal use of the product, retrieving those credentials only occurs after a username/password authentication step; however, this authentication step is on the client side, and an attacker can develop their own client that skips this step.)\"}, {\"lang\": \"es\", \"value\": \"El Servicio de Aplicaciones de Patterson en Patterson Eaglesoft versiones 18 hasta 21, acepta la misma autenticaci\\u00f3n de certificado a trav\\u00e9s de las instalaciones de diferentes clientes (que presentan la misma versi\\u00f3n de software). Esto proporciona acceso remoto a las credenciales de la base de datos SQL. (En el uso normal del producto, recuperando esas credenciales s\\u00f3lo se produce despu\\u00e9s de un paso de autenticaci\\u00f3n de nombre de usuario y contrase\\u00f1a; sin embargo, este paso de autenticaci\\u00f3n est\\u00e1 en el lado del cliente, y un atacante puede desarrollar su propio cliente que salte este paso)\"}]",
      "id": "CVE-2021-35193",
      "lastModified": "2024-11-21T06:12:01.250",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:N/A:N\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2021-07-30T19:15:09.370",
      "references": "[{\"url\": \"http://patterson.eaglesoft.net/Home/Contact-Us\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://github.com/jshafer817/Eaglesoft\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\", \"Third Party Advisory\"]}, {\"url\": \"https://justinshafer.blogspot.com/2021/07/eaglesoft-18-through-21-vulnerability.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\", \"Third Party Advisory\"]}, {\"url\": \"http://patterson.eaglesoft.net/Home/Contact-Us\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://github.com/jshafer817/Eaglesoft\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Third Party Advisory\"]}, {\"url\": \"https://justinshafer.blogspot.com/2021/07/eaglesoft-18-through-21-vulnerability.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Third Party Advisory\"]}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-295\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2021-35193\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2021-07-30T19:15:09.370\",\"lastModified\":\"2024-11-21T06:12:01.250\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across different customers\u0027 installations (that have the same software version). This provides remote access to SQL database credentials. (In the normal use of the product, retrieving those credentials only occurs after a username/password authentication step; however, this authentication step is on the client side, and an attacker can develop their own client that skips this step.)\"},{\"lang\":\"es\",\"value\":\"El Servicio de Aplicaciones de Patterson en Patterson Eaglesoft versiones 18 hasta 21, acepta la misma autenticaci\u00f3n de certificado a trav\u00e9s de las instalaciones de diferentes clientes (que presentan la misma versi\u00f3n de software). Esto proporciona acceso remoto a las credenciales de la base de datos SQL. (En el uso normal del producto, recuperando esas credenciales s\u00f3lo se produce despu\u00e9s de un paso de autenticaci\u00f3n de nombre de usuario y contrase\u00f1a; sin embargo, este paso de autenticaci\u00f3n est\u00e1 en el lado del cliente, y un atacante puede desarrollar su propio cliente que salte este paso)\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:N/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-295\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pattersondental:eaglesoft:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"18.0\",\"versionEndIncluding\":\"21.0\",\"matchCriteriaId\":\"76418DF5-4706-464C-AC67-F6F9435EE544\"}]}]}],\"references\":[{\"url\":\"http://patterson.eaglesoft.net/Home/Contact-Us\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://github.com/jshafer817/Eaglesoft\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://justinshafer.blogspot.com/2021/07/eaglesoft-18-through-21-vulnerability.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"http://patterson.eaglesoft.net/Home/Contact-Us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://github.com/jshafer817/Eaglesoft\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://justinshafer.blogspot.com/2021/07/eaglesoft-18-through-21-vulnerability.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.