PT-2020-14032 · Openclinic · Openclinic Ga

Published 2020-07-20 · Updated 2020-07-22 · CVE-2020-14484

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClinic GA versions 5.09.02 through 5.89.05b

Description The issue may allow an attacker to bypass the system's account lockout protection, potentially enabling brute force password attacks.

Recommendations For OpenClinic GA versions 5.09.02 through 5.89.05b, consider temporarily restricting access to the account lockout mechanism until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2020-14484

Affected Products

Openclinic Ga

References · 3

• https://osv.dev/vulnerability/CVE-2020-14484 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-14484 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsma-20-184-01 · Note