CyberRota Analysis
AI-GeneratedThe vulnerability in the Java implementation of sfturing hosp_order allows for the cleartext storage of sensitive information due to improper handling in the CommonUserServiceImpl.java file. This issue poses a risk primarily in local environments, where an attacker could exploit it to access sensitive data. Organizations using this software should prioritize remediation, especially those handling sensitive information, as the exploit has been publicly disclosed.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This vulnerability affects unknown code of the file ssm_pro/src/main/java/cn/sfturing/service/impl/CommonUserServiceImpl.java. Such manipulation leads to cleartext storage of sensitive information. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.