Vulnerabilities > CVE-2020-20444 - Missing Authorization vulnerability in Openclinic Project Openclinic 0.8.20160412
Attack vector
NETWORK Attack complexity
LOW Privileges required
HIGH Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected 'file' GET parameter in '/shared/view_source.php' which "could" lead to RCE vulnerability .
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |