CVE-2019-17428

An issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation exists, allowing for all encrypted data stored within the database to be decrypted.

CVSS v3.1

5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.65% chance of exploitation in the next 30 days, 49th percentile

Published

2019-12-12

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://know.bishopfox.com/advisories/solismed-critical

References

• CVE Record
• NVD entry

Related

• CVE-2019-17427
• CVE-2019-17444
• CVE-2019-17424
• CVE-2019-17450
• CVE-2019-17418
• CVE-2019-17451