OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted request to initiate a session with limited functionality, which may allow execution of admin functions such as SQL queries.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14485
Reference (s):
- https://us-cert.cisa.gov/ics/advisories/icsma-20-184-01
- URL: https://us-cert.cisa.gov/ics/advisories/icsma-20-184-01