Unrated severityNVD Advisory· Published Nov 28, 2023· Updated Dec 2, 2024
Overly Permissive Access Policy
CVE-2023-29065
Description
The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user. A threat actor with physical access could potentially gain credentials, which could be used to alter or destroy data stored in the database.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Becton, Dickinson and Company (BD)/FACSChorusv5Range: 5.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.