CVE-2020-14486

An attacker may bypass permission/authorization checks in OpenClinic GA 5.09.02 and 5.89.05b by ignoring the redirect of a permission failure, which may allow unauthorized execution of commands...

CVE-2020-14486

OpenClinic GA is affected by CVE-2020-14486 via an Authorization bypass (CWE-285). Affected versions include 5.09.02 and 5.89.05b. The vulnerability arises from bypassing permission checks by ignoring the redirect of a permission failure, potentially enabling unauthorized execution of commands. T...