Open Dental before version 18.4 installs a mysql database and...

9.8 CVSS

Vulnerability Description

Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-15719

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.tenable.com/security/research/tra-2018-44

More from Open Dental

View All →

CVE-2018-15718

Open Dental before version 18.4 transmits the entire user database...

High 7.5

CVE-2018-15717

Open Dental before version 18.4 stores user passwords as base64...

Medium 5.3

Affected Vendor

Open Dental

View all reports →

Affected Software

Open Dental

Vulnerable Versions:

18.3 and below

Timeline

Official Publish: December 12th, 2018

Last Modified: September 16th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-255

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.