Information disclosure in Hospira Mednet

CVE-2014-5400

The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file.

EPSS: 0.003 (25.4th percentile) — read the EPSS interpretation.

Affected products

Hospira Mednet — versions 0, 6.1

Weakness classification (CWE)

References

ics-cert@hq.dhs.gov
ics-cert@hq.dhs.gov
af854a3a-2127-422b-91ae-364da2661108 (Third Party Advisory, US Government Resource)