Asseco mMedica Authentication Bypass Vulnerability Allowing Unauthenticated Database Access

A vulnerability exists in Asseco mMedica versions prior to 11.9.5, allowing unauthenticated users to connect to publicly accessible databases using arbitrary credentials. This vulnerability exploits a previously authenticated connection through the 'mmBackup' application, bypassing authentication mechanisms and granting unauthorized access to sensitive data within the database.

Impact

Exploitation of this vulnerability could lead to unauthorized access to databases containing sensitive information, potentially allowing for data manipulation or extraction.