CVEvulnerability

CVE-2018-5552

3.3 LOW Published 2018-03-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-03-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
2.9 LOW — CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.0 ([email protected])
3.3 LOW — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-760, CWE-798

Description

Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a hard-coded cryptographic salt, "S@l+&pepper".

Affected configurations

• docutracinc dtisqlinstaller (<= 1.6.4.0)

Related

Weakness · CWE (2)

  • CWE-760 Use of a One-Way Hash with a Predictable Salt weakness
  • CWE-798 Use of Hard-coded Credentials weakness

References