by Kastro
Paper/Archive/CVE-2020-14484

CVE-2020-14484

icscert — OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass the system’s account lockout protection, which may allow brut…

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 69.3.693 × 2013.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass the system’s account lockout protection, which may allow brute force password attacks.

Affected

ProductAffectedFixed inSource
OpenClinic GAVersions 5.09.02 and 5.89.05b–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refus-cert.cisa.gov/ics/advisories/icsma-20-184-01