by Kastro
Paper/Archive/CVE-2020-14494

CVE-2020-14494

icscert — OpenClinic GA versions 5.09.02 and 5.89.05b contain an authentication mechanism within the system that does not provide sufficient comple…

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 70.6.706 × 2014.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

OpenClinic GA versions 5.09.02 and 5.89.05b contain an authentication mechanism within the system that does not provide sufficient complexity to protect against brute force attacks, which may allow unauthorized users to access the system after no more than a fixed maximum number of attempts.

Affected

ProductAffectedFixed inSource
OpenClinic GAVersions 5.09.02 and 5.89.05b–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refus-cert.cisa.gov/ics/advisories/icsma-20-184-01