title: ​Softneta MedDream PACS Plaintext Storage of a Password
description: ​Softneta MedDream PACS stores usernames and passwords in plaintext. The plaintext storage could be abused by attackers to leak legitimate user’s credentials.
problem types: CWE-256 ​Plaintext Storage of a Password
affected:
{
defaultStatus: unaffected
product: MedDream PACS
vendor: Softneta
versions:
lessThanOrEqual:  v7.2.8.810, status: affected, version: 0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions:
​Softneta recommends users update to  v7.2.9.820 https://www.softneta.com/files/meddreampacs/premium/230530/MedDream-PACS-Premium-7.2.9.820.exe  of MedDream PACS Server or patch their current system using  Fix-v230712 https://www.softneta.com/files/meddreampacs/premium/Fix-v230712.zip .
​For assistance or additional information about installing the software, please  contact Softneta https://www.softneta.com/contacts/  directly.