CVE-2019-17428

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

An issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation exists, allowing for all encrypted data stored within the database to be decrypted.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-327

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://know.bishopfox.com/advisoriesThird Party Advisory
https://know.bishopfox.com/advisories/solismed-criticalExploit, Third Party Advisory
https://www.solismed.com/Product
https://know.bishopfox.com/advisoriesThird Party Advisory
https://know.bishopfox.com/advisories/solismed-criticalExploit, Third Party Advisory
https://www.solismed.com/Product

Timeline

Published: Dec 12, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-174299.8Adhouma CMS through 2019-10-09 has SQL Injection via the post.php p_id parameter.CVE-2019-17438.8A vulnerability in the web UI framework of Cisco IOS XE Software could allow an authenticated, remote attacker to make unauthorized changes CVE-2019-174306.1EyouCms through 2019-07-11 has XSS related to the login.php web_recordnum parameter.CVE-2019-174318.8An issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerability.CVE-2019-174326.5An issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/admin/general.config/edit CSRF vulnerability, as demonstrated by CVE-2019-174334.8z-song laravel-admin 1.7.3 has XSS via the Slug or Name on the Roles screen, because of mishandling on the "Operation log" screen.CVE-2019-174345.4LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen.CVE-2019-174355.5A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Wind CVE-2019-174367.1A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlier and version 4.1.12 CVE-2019-174377.8An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser custom role user to el CVE-2019-174409.8Improper restriction of communications to Log Forwarding Card (LFC) on PA-7000 Series devices with second-generation Switch Management Card CVE-2019-174449.8Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them. This ma