Description (CNA)
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a vulnerability where sensitive data is unintentionally revealed to unauthorized parties. Contents of Clinical Notes and Care Plan, where an encounter has Sensitivity=high, can be viewed and changed by users who do not have Sensitivities=high privilege. Version 7.0.4 fixes the issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| openemr / openemr | affected < 7.0.4 |
CWE
CWE-200
References
- https://github.com/openemr/openemr/security/advisories/GHSA-739g-6m63-p7fr
- https://github.com/openemr/openemr/commit/aef3d1c85d9ff2f28d3d361d2818aee79b6dcd33
ADP enrichment
No English description supplied.
No references supplied.