CVE Vulnerabilities

CVE-2020-14489

Insufficiently Protected Credentials

Published: Jul 29, 2020 | Modified: Jul 30, 2020
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

OpenClinic GA 5.09.02 and 5.89.05b stores passwords using inadequate hashing complexity, which may allow an attacker to recover passwords using known password cracking techniques.

Weakness

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Affected Software

Name Vendor Start Version End Version
Openclinic_ga Openclinic_ga_project 5.09.02 (including) 5.09.02 (including)
Openclinic_ga Openclinic_ga_project 5.89.05b (including) 5.89.05b (including)

Potential Mitigations

References