CVE-2014-5400

The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to…

icscert·CWE-260·Published 2015-04-03

CVSS

—

EPSS

0.00

KEV

Exploits

cve.orgen

184 chars

The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file.

NVDen

184 chars

The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file.

NVDes

234 chars

El componente de instalación en Hospira MedNet anterior a 6.1 coloca a las credenciales en texto claro en los ficheros de configuración, lo que permite a usuarios locales obtener información sensible mediante la lectura de un fichero.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	cve.org	6.8	—	—	AV:L/AC:L/Au:S/C:C/I:C/A:C
2.0	Primary	NVD	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N