CVE-2020-14486
29.07.2020, 14:15
An attacker may bypass permission/authorization checks in OpenClinic GA 5.09.02 and 5.89.05b by ignoring the redirect of a permission failure, which may allow unauthorized execution of commands.Enginsight
| Vendor | Product | Version |
|---|---|---|
| openclinic_ga_project | openclinic_ga | 5.09.02 |
| openclinic_ga_project | openclinic_ga | 5.89.05b:b |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-285 - Improper AuthorizationThe software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
- CWE-863 - Incorrect AuthorizationThe software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.