The FACSChorus software does not properly assign data access privileges for operating system user accounts. A non-administrative OS account can modify information stored in the local application data folders.
https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software