CVE-2016-4328

Published: Jun 10, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credentials, which makes it easier for remote attackers to obtain sensitive information via direct requests to the application database server.

Affected (1)

Products: Medhost: Perioperative Information Management System

Medhost

1 product

Perioperative Information Management System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Medhost Perioperative Information Management System	All versions

References (2)

http://www.kb.cert.org/vuls/id/482135

Source: cret@cert.org

Third Party AdvisoryUS Government Resource

http://www.kb.cert.org/vuls/id/482135

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.