CVE-2020-14489

Summary

OpenClinic GA 5.09.02 and 5.89.05b stores passwords using inadequate hashing complexity, which may allow an attacker to recover passwords using known password cracking techniques.

Affected Software

VendorProductVersion RangeStatus
open sourceOpenClinic GA5.09.02affected
open sourceOpenClinic GA5.89.05baffected

Weaknesses

  • CWE-522: INSUFFICIENTLY PROTECTED CREDENTIALS CWE-522

Workarounds

OpenClinic GA is aware of these vulnerabilities but has not provided any confirmation of their resolution. Please upgrade to the latest version to ensure you have all current fixes.

ADP Enrichment

CVE Program Container

Additional References

References