Test ID:	1.3.6.1.4.1.25623.1.0.145671
Category:	Web application abuses
Title:	OpenEMR 2.7.2-rc1 < 6.0.0.1 Access Control Vulnerability
Summary:	OpenEMR is prone to an access control vulnerability.
Description:	Summary: OpenEMR is prone to an access control vulnerability. Vulnerability Insight: The OpenEMR application does not enforce adequate checks while creating users. Provided two users are named, one with uppercase and one with lowercase, it is possible for a malicious user to read and send sensitive messages on behalf of the victim user, while totally unknown to the victim user. Affected Software/OS: OpenEMR version 2.7.2-rc1 through 6.0.0. Solution: Update to version 6.0.0.1 or later. CVSS Score: 5.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-25920
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.