CVEvulnerability

CVE-2020-14487

9.8 CRITICAL Published 2020-07-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-07-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.4 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-912

Description

OpenClinic GA 5.09.02 contains a hidden default user account that may be accessed if an administrator has not expressly turned off this account, which may allow an attacker to login and execute arbitrary commands.

Affected configurations

• freemedsoftware openclinic ga 5.09.02

Related

Weakness · CWE (1)

  • CWE-912 Hidden Functionality weakness

References