description: Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information.
problem types: CWE-255 Credentials management
affected:
{
product: Open Dental
vendor: Open Dental
versions:
status: affected, version: 18.3 and below
}