CVE-2014-5400CWE-260

Hospira MedNet Password in Configuration File

Medium · published April 3, 2015

CVSS v2.0
6.8
EPSS
0%
Percentile
24.7
In the wild
Unconfirmed
What it is

The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file.

The record
Technical detail
CVSS v2.0
6.8 · MEDIUM
Vector
AV:L/AC:L/Au:S/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.00329 · 24.7th percentile
Weakness
CWE-260 · Password in Configuration File
Published
2015-04-03T10:00Z
EPSS history
Timeline
  • 03 APR 10:00Z
    Hospira MedNet Password in Configuration File
    cvelistv5