PT-2020-14037 · Openclinic · Openclinic Ga

Published 2020-07-29 · Updated 2020-07-30 · CVE-2020-14489

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenClinic GA versions 5.09.02 through 5.89.05b

Description The issue concerns inadequate hashing complexity used for storing passwords, potentially allowing attackers to recover passwords using known password cracking techniques.

Recommendations For OpenClinic GA versions 5.09.02 through 5.89.05b, consider implementing a more secure password hashing algorithm to mitigate the risk of password recovery by attackers. As a temporary workaround, restrict access to sensitive areas of the system to minimize the risk of exploitation.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2020-14489

Affected Products

Openclinic Ga

References · 3

• https://osv.dev/vulnerability/CVE-2020-14489 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-14489 · Security Note
• https://us-cert.cisa.gov/ics/advisories/ICSMA-20-184-01 · Note