CVE-2020-14489 MEDIUM

CVE-2020-14489: OpenClinic GA

Vendor Open Source
Product OpenClinic GA
Weakness CWE-522 · Insufficiently protected credentials
Published July 29, 2020
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

6.2/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

OpenClinic GA 5.09.02 and 5.89.05b stores passwords using inadequate hashing complexity, which may allow an attacker to recover passwords using known password cracking techniques.

Key dates

02Disclosure timeline

July 29, 2020 CVE published
September 17, 2024 Record updated