VULNERABILITY INTELLIGENCE

CVE-2020-14487

CVSS score9.4 CRITICAL
EPSS probability2.17%
CISA KEVNot currently listed
Published2020-07-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Description

OpenClinic GA 5.09.02 contains a hidden default user account that may be accessed if an administrator has not expressly turned off this account, which may allow an attacker to login and execute arbitrary commands.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-912
  • nvd@nist.gov: NVD-CWE-Other

Primary references