Skip to content
OpenAdvisories
Critical · 9.4 CVE-2020-14487 EUVD-2020-6623GHSA-q8xc-9j26-pwf8

OpenClinic GA

Published Jul 29, 2020 · Updated Sep 16, 2024 · Assigned by icscert

Description

OpenClinic GA 5.09.02 contains a hidden default user account that may be accessed if an administrator has not expressly turned off this account, which may allow an attacker to login and execute arbitrary commands.

Affected products

VendorProductAffectedFixed
open source OpenClinic GA 5.09.02 —

References