{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across different customers' installations (that have the same software version). This provides remote access to SQL database credentials. (In the normal use of the product, retrieving those credentials only occurs after a username/password authentication step; however, this authentication step is on the client side, and an attacker can develop their own client that skips this step.)"}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-07-30T18:32:55", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://patterson.eaglesoft.net/Home/Contact-Us"}, {"tags": ["x_refsource_MISC"], "url": "https://justinshafer.blogspot.com/2021/07/eaglesoft-18-through-21-vulnerability.html"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/jshafer817/Eaglesoft"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2021-35193", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across different customers' installations (that have the same software version). This provides remote access to SQL database credentials. (In the normal use of the product, retrieving those credentials only occurs after a username/password authentication step; however, this authentication step is on the client side, and an attacker can develop their own client that skips this step.)"}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://patterson.eaglesoft.net/Home/Contact-Us", "refsource": "MISC", "url": "http://patterson.eaglesoft.net/Home/Contact-Us"}, {"name": "https://justinshafer.blogspot.com/2021/07/eaglesoft-18-through-21-vulnerability.html", "refsource": "MISC", "url": "https://justinshafer.blogspot.com/2021/07/eaglesoft-18-through-21-vulnerability.html"}, {"name": "https://github.com/jshafer817/Eaglesoft", "refsource": "MISC", "url": "https://github.com/jshafer817/Eaglesoft"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2021-35193", "datePublished": "2021-07-30T18:32:55", "dateReserved": "2021-06-21T00:00:00", "dateUpdated": "2021-07-30T18:32:55", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:pattersondental:eaglesoft:*:*:*:*:*:*:*:*", "matchCriteriaId": "76418DF5-4706-464C-AC67-F6F9435EE544", "versionEndIncluding": "21.0", "versionStartIncluding": "18.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across different customers' installations (that have the same software version). This provides remote access to SQL database credentials. (In the normal use of the product, retrieving those credentials only occurs after a username/password authentication step; however, this authentication step is on the client side, and an attacker can develop their own client that skips this step.)"}, {"lang": "es", "value": "El Servicio de Aplicaciones de Patterson en Patterson Eaglesoft versiones 18 hasta 21, acepta la misma autenticaci\u00f3n de certificado a trav\u00e9s de las instalaciones de diferentes clientes (que presentan la misma versi\u00f3n de software). Esto proporciona acceso remoto a las credenciales de la base de datos SQL. (En el uso normal del producto, recuperando esas credenciales s\u00f3lo se produce despu\u00e9s de un paso de autenticaci\u00f3n de nombre de usuario y contrase\u00f1a; sin embargo, este paso de autenticaci\u00f3n est\u00e1 en el lado del cliente, y un atacante puede desarrollar su propio cliente que salte este paso)"}], "id": "CVE-2021-35193", "lastModified": "2021-08-11T15:25:11.357", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-07-30T19:15:09.370", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://patterson.eaglesoft.net/Home/Contact-Us"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/jshafer817/Eaglesoft"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://justinshafer.blogspot.com/2021/07/eaglesoft-18-through-21-vulnerability.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-295"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}