CVE-2017-6022: Critical severity bd performa vulnerability
A hard-coded password issue was discovered in Becton, Dickinson and Company (BD) PerformA, Version 2.0.14.0 and prior versions, and KLA Journal Service, Version 1.0.51 and prior versions. They use hard-coded passwords to access the BD Kiestra Database, which could be leveraged to compromise the confidentiality of limited PHI/PII information stored in the BD Kiestra Database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6022?
CVE-2017-6022 is classified as a high severity vulnerability due to the use of hard-coded passwords.
How do I fix CVE-2017-6022?
To fix CVE-2017-6022, update to versions of BD PerformA later than 2.0.14.0 and BD KLA Journal Service later than 1.0.51.
What software is affected by CVE-2017-6022?
CVE-2017-6022 affects BD PerformA versions up to 2.0.14.0 and KLA Journal Service versions up to 1.0.51.
What is the impact of exploiting CVE-2017-6022?
Exploiting CVE-2017-6022 could allow an attacker to gain unauthorized access to the BD Kiestra Database.
Who is responsible for the CVE-2017-6022 vulnerability?
The vulnerability CVE-2017-6022 was discovered in products developed by Becton, Dickinson and Company.