PT-2021-3440 · Jact · Openclinic

U0Pattern · Published 2021-06-16 · Updated 2022-09-29 · CVE-2020-20444

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Jact OpenClinic version 0.8.20160412

Description The issue is related to errors in authorization in the shared/view source.php component of the OpenClinic software for managing medical records. An attacker, acting remotely, can exploit this issue to potentially execute arbitrary code after logging into the admin account. This is achieved by using an infected file GET parameter in the "/shared/view source.php" API endpoint.

Recommendations For Jact OpenClinic version 0.8.20160412, as a temporary workaround, consider restricting access to the "/shared/view source.php" API endpoint to minimize the risk of exploitation. Additionally, avoid using the file parameter in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2021-03300

CVE-2020-20444

Affected Products

Openclinic

References · 7

• 🔥 https://github.com/jact/openclinic/issues/8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-20444 · Security Note
• https://osv.dev/vulnerability/CVE-2020-20444 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03300 · Security Note
• https://labs.bishopfox.com/advisories/openclinic-version-0.8.2 · Note
• https://cwe.mitre.org/data/definitions/23.html · Note
• https://t.me/cibsecurity/25495 · Telegram Post