# CVE-2018-5552

## Summary

- **CVE ID:** CVE-2018-5552
- **Severity:** LOW
- **CVSS Score:** 2.9 (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
- **CWE:** CWE-760, CWE-760
- **Published:** Mar 19, 2018
- **Last Modified:** Mar 14, 2026

## Description

Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a hard-coded cryptographic salt, "S@l+&pepper".

## Affected Products

- DocuTrac — DTISQLInstaller.exe (unspecified)

## References

- [CNA](https://blog.rapid7.com/2018/03/14/r7-2018-01-cve-2018-5551-cve-2018-5552-docutrac-office-therapy-installer-hard-coded-credentials-and-cryptographic-salt/)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.03%
- **EPSS Percentile:** 6.6

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._