CVE DATABASE / CVE-2001-1546

CVE-2001-1546

CVSS 7.8 · HIGH

Summary

Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file.

CVSS 3.1 breakdown

Base score	7.8 (HIGH)
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector	LOCAL
Attack complexity	LOW
Privileges required	LOW
User interaction	NONE
Scope	UNCHANGED
Confidentiality	HIGH
Integrity	HIGH
Availability	HIGH

Weakness type (CWE)

CWE-326

Affected products

Mckesson pathways homecare

Check this CVE live

Use our free CVE Lookup tool for the latest NVD record, or browse the full CISA KEV catalog.

References

http://www.iss.net/security_center/static/7682.php
http://www.securityfocus.com/archive/1/244367
http://www.securityfocus.com/bid/3653

Data: NIST NVD. NVD last modified 2026-04-16. Always verify against the vendor advisory before acting.