Skip to content
OpenAdvisories
Low · 3.2 CVE-2023-29066 EUVD-2023-32669GHSA-42p3-688q-33p6

Incorrect User Management

Published Nov 28, 2023 · Updated Feb 25, 2026 · Assigned by BD

Description

The FACSChorus software does not properly assign data access privileges for operating system user accounts. A non-administrative OS account can modify information stored in the local application data folders.

Affected products

VendorProductAffectedFixed
Becton, Dickinson and Company (BD) FACSChorus 5.0 – ≤ 5.1 —

Advisories 1

References