OpenEMR Access Control Error Vulnerability (CNVD-2022-54903)

OpenEMR is an open source healthcare management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. versions of OpenEMR prior to 7.0.0 have an access control error vulnerability that stems from a lack of functional-level access control, which can be exploited by an attacker to allow a non-privileged user to directly view the administrator module.