CVE-2020-28937 | BDVDB-2026-145409 Detail

Description#

OpenClinic version 0.8.2 is affected by a missing authentication vulnerability that allows unauthenticated users to access any patient's medical test results, possibly resulting in disclosure of Protected Health Information (PHI) stored in the application, via a direct request for the /tests/ URI.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12020-12-03Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.