OpenClinic GA 5.09.02 contains a hidden default user account that may be accessed if an administrator has not expressly turned off this account, which may allow an attacker to login and execute arbitrary commands.
The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product’s users or administrators.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openclinic_ga | Freemedsoftware | 5.09.02 (including) | 5.09.02 (including) |