Vulnerabilities > CVE-2018-10572 - Unspecified vulnerability in Open-Emr Openemr

CVSS 5.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

open-emr

NVD

Published: 2018-04-30

Updated: 2019-10-03

Summary

interface/patient_file/letter.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the newtemplatename and form_body parameters.

Vulnerable Configurations

Part	Description	Count
Application	Open-Emr Open EMR Openemr 2.0.1.2 Open EMR Openemr 2.7.2 Open EMR Openemr 2.7.3 Open EMR Openemr 2.8.0 Open EMR Openemr 2.8.1 Open EMR Openemr 2.8.2 Open EMR Openemr 2.8.3 Open EMR Openemr 2.9.0 Open EMR Openemr 3.0.0 Open EMR Openemr 3.0.1 Open EMR Openemr 3.1.0 Open EMR Openemr 3.2.0 Open EMR Openemr 4.0.0 Open EMR Openemr 4.1.0 Open EMR Openemr 4.1.1 Open EMR Openemr 4.1.2 Open EMR Openemr 4.1.2.3 Open EMR Openemr 4.1.2.6 Open EMR Openemr 4.1.2.7 Open EMR Openemr 4.2.0 Open EMR Openemr 4.2.0.3 Open EMR Openemr 4.2.1 Open EMR Openemr 4.2.2 Open EMR Openemr 5.0.0 Open EMR Openemr 5.0.0.5 Open EMR Openemr 5.0.0.6	28

Summary

Vulnerable Configurations

References