CVE-2023-39227 MEDIUM

CVE-2023-39227: Softneta MedDream PACS Plaintext Storage of a Password

Vendor Softneta

Product MedDream PACS

Weakness CWE-256

Published September 11, 2023

Last update September 25, 2024

View on NVD All CVEs

CVSS base score

6.1/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

What the vulnerability does

01Description

Softneta MedDream PACS stores usernames and passwords in plaintext. The plaintext storage could be abused by attackers to leak legitimate user’s credentials.

Key dates

02Disclosure timeline

September 11, 2023 CVE published

September 25, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-39227 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/256.html

Related vulnerabilities

CVE-2023-39227: ​Softneta MedDream PACS Plaintext Storage of a Password

01Description

02Disclosure timeline

03References

04Related CVE

CVE-2023-39227: Softneta MedDream PACS Plaintext Storage of a Password