Description
OpenClinic GA 5.09.02 contains a hidden default user account that may be accessed if an administrator has not expressly turned off this account, which may allow an attacker to login and execute arbitrary commands.
Scores
CVSS v3
9.4
EPSS
0.0041
EPSS Percentile
61.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Details
CWE
CWE-912
Status
published
Products (1)
freemedsoftware/openclinic_ga
5.09.02
Published
Jul 29, 2020
Tracked Since
Feb 18, 2026