high7.5
CVE-2018-15718
Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt.
Impact
Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opendental | Opendental | before 18.4 |