Security firm Rapid7 is warning organizations about vulnerabilities discovered in software developed by DocuTrac, Computer Weekly reports. The QuicDoc & Office Therapy suite is used in more than 5,000 health care organizations. Researchers found the software creates static accounts with significant access to the database holding the information the software works with. “The end-user of the affected product is neither informed of the existence of these accounts, nor able to change these account passwords without impacting the functionality of the application,” Rapid7 Research Director Tod Beardsley wrote in a blog post, adding DocuTrac should release a software update to address the vulnerabilities.
Full Story