← CVE Intelligence

CVE-2023-29065

Overly Permissive Access Policy PUBLISHED

Description (CNA)

The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user. A threat actor with physical access could potentially gain credentials, which could be used to alter or destroy data stored in the database.

Affected (CNA)

Vendor / productVersions
Becton, Dickinson and Company (BD) / FACSChorusaffected 5.0 through 5.1

CWE

CWE-277

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.