CVE-2020-14486CWE-285

OpenClinic GA

Medium · published July 29, 2020

CVSS v3.1
6.3
EPSS
1%
Percentile
69.8
In the wild
Unconfirmed
What it is

An attacker may bypass permission/authorization checks in OpenClinic GA 5.09.02 and 5.89.05b by ignoring the redirect of a permission failure, which may allow unauthorized execution of commands.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01280 · 69.8th percentile
Weakness
CWE-285 · Improper Authorization
Published
2020-07-29T13:21Z
EPSS history
Timeline
  • 29 JUL 13:21Z
    OpenClinic GA
    cvelistv5