CyberRota Analysis
AI-GeneratedThe vulnerability affects the Java implementation of the sfturing hosp_order application, specifically in the getProperties function of MailUtil.java, allowing for the cleartext transmission of sensitive information. Although the attack requires a high level of complexity and is considered difficult to exploit, the public availability of the exploit means that organizations using this software should prioritize remediation efforts. Users of this application, particularly those handling sensitive data, should assess their exposure and implement protective measures promptly.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This issue affects the function getProperties of the file ssm_pro/src/main/java/cn/sfturing/utils/MailUtil.java. Performing a manipulation results in cleartext transmission of sensitive information. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is assessed as difficult. The exploit has been made public and could be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.