CRITICAL🇵🇱 Wersja polska

CVE-2017-6022

CVSS 9.8v3.0pub. 2017-06-30upd. 2026-05-13

A hard-coded password issue was discovered in Becton, Dickinson and Company (BD) PerformA, Version 2.0.14.0 and prior versions, and KLA Journal Service, Version 1.0.51 and prior versions. They use hard-coded passwords to access the BD Kiestra Database, which could be leveraged to compromise the confidentiality of limited PHI/PII information stored in the BD Kiestra Database.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Bd Kla Journal Service

    APP
    Bd
    ≤ 1.0.51

  • Bd Performa

    APP
    Bd
    ≤ 2.0.14.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2018-10593MEDIUM5.6same product

A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an...

CVE-2018-10595MEDIUM6.3same product

A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged ac...

CVE-2019-10959CRITICAL10.0PL ✓same vendor

BD Alaris Gateway Workstation — upload złośliwego firmware bez ograniczeń

CVE-2018-14786CRITICAL9.4PL ✓same vendor

Auth Bypass w pompach strzykawkowych BD Alaris — nieautoryzowany zdalny dostęp

CVE-2023-30563HIGH8.2same vendor

A malicious file could be uploaded into a System Manager User Import Function resulting in a hijacked session.