CVE-2020-14486 MEDIUM

CVE-2020-14486: OpenClinic GA

Vendor Open Source

Product OpenClinic GA

Weakness CWE-285

Published July 29, 2020

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

6.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

An attacker may bypass permission/authorization checks in OpenClinic GA 5.09.02 and 5.89.05b by ignoring the redirect of a permission failure, which may allow unauthorized execution of commands.

Key dates

02Disclosure timeline

July 29, 2020 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-14486 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/285.html

Related vulnerabilities

Identifiers

CVE CVE-2020-14486

CWE CWE-285

CVSS 6.3 / MEDIUM

Affected versions

Vendor Open Source

Product OpenClinic GA

Affected 5.09.02

Vendor Open Source

Product OpenClinic GA

Affected 5.89.05b

CVE-2020-14486: OpenClinic GA

01Description

02Disclosure timeline

03References

04Related CVE