Hospira MedNet before 6.1 uses a hardcoded cleartext... · CVE-2014-5405 · GitHub Advisory Database · GitHub

Hospira MedNet before 6.1 uses a hardcoded cleartext...

High severity Unreviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Nov 3, 2025

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.

References

Published by the National Vulnerability Database

Apr 3, 2015

Published to the GitHub Advisory Database May 17, 2022

Last updated Nov 3, 2025

Weaknesses

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Learn more on MITRE.

CWE-259

Use of Hard-coded Password

The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components. Learn more on MITRE.