Description (CNA)
OpenEMR through 8.2.0 contains an improper authentication vulnerability in the OAuth2 dynamic client registration endpoint that allows unauthenticated attackers to register a malicious client with system-level FHIR scopes by supplying a self-generated RSA keypair via the jwks field. Once an administrator approves the registered client, attackers can use the client_credentials grant with a self-signed JWT assertion to obtain access tokens granting read access to all FHIR resources across all patients in the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| openemr / openemr | affected 0 through 8.2.0 |
CWE
CWE-306
References
- https://jivasecurity.com/writeups/openemr-unauth-oauth2-client-registration
- https://www.vulncheck.com/advisories/openemr-oauth2-dynamic-client-registration-unauthorized-fhir-access
ADP enrichment
No English description supplied.
No references supplied.