CVE-2014-9736: Critical severity Gehealthcare Centricity Clinical Archive Audit Trail Repository vulnerability
GE Healthcare Centricity Clinical Archive Audit Trail Repository has a default password of initinit for the (1) SSL key manager and (2) server keystore; (3) keystorepassword for the server truststore; and atna for the (4) primary storage database and (5) archive storage database, which has unspecified impact and attack vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9736?
CVE-2014-9736 is rated as a critical vulnerability due to the use of default passwords in sensitive components.
How do I fix CVE-2014-9736?
To fix CVE-2014-9736, change the default passwords used for the SSL key manager, server keystore, and both the primary and archive database.
What components are affected by CVE-2014-9736?
CVE-2014-9736 affects the SSL key manager, server keystore, keystore_password for the server truststore, and the databases associated with GE Healthcare Centricity Clinical Archive.
What risks are associated with CVE-2014-9736?
The risks associated with CVE-2014-9736 include unauthorized access to the server and potential data breaches due to weak default passwords.
Is there a patch available for CVE-2014-9736?
No official patch is released for CVE-2014-9736; it is recommended to manually change all default passwords to secure values.