Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2014-5405

Hospira MedNet Use of Hard-coded Password

Description

Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hospira MedNet

Default version status: unaffected

  • 0 to ≤ 5.8affected
  • 6.1unaffected

References