CVE-2020-14491 – OpenClinic GA versions 5.09.02 and 5.89.05b do not properly check permiss

OpenClinic GA versions 5.09.02 and 5.89.05b do not properly check permissions before executing SQL queries, which may allow a low-privilege user to access privileged information.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14491

Reference (s):

• https://us-cert.cisa.gov/ics/advisories/icsma-20-184-01
• URL: https://us-cert.cisa.gov/ics/advisories/icsma-20-184-01