CVE-2020-14485 – OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypa

OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted request to initiate a session with limited functionality, which may allow execution of admin functions such as SQL queries.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14485

Reference (s):

• https://us-cert.cisa.gov/ics/advisories/icsma-20-184-01
• URL: https://us-cert.cisa.gov/ics/advisories/icsma-20-184-01