CVE-2023-29064

Hardcoded Secrets PUBLISHED

Description (CNA)

The FACSChorus software contains sensitive information stored in plaintext. A threat actor could gain hardcoded secrets used by the application, which include tokens and passwords for administrative accounts.

Affected (CNA)

Vendor / product	Versions
Becton, Dickinson and Company (BD) / FACSChorus	affected 5.0 through 5.1

CWE

CWE-798

References

https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software

ADP enrichment

CVE

No English description supplied.

https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software

CISA-ADP

No English description supplied.

No references supplied.