Vulnerability Description
eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserService.jsp which allows remote attackers to hijack the authentication of content administrators for requests that could lead to the creation, modification and deletion of users, appointments and employees.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Eclinicalworks | Population Health | - |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/135533/eClinicalWorks-Population-Health-CCMExploitThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/archive/1/537420/100/0/threadedThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/39402/ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/135533/eClinicalWorks-Population-Health-CCMExploitThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/archive/1/537420/100/0/threadedThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/39402/ExploitThird Party AdvisoryVDB Entry
FAQ
What is CVE-2015-4593?
CVE-2015-4593 is a vulnerability with a CVSS score of 8.8 (HIGH). eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserService.jsp which allows remote attackers to hijack the authentication of content ad...
How severe is CVE-2015-4593?
CVE-2015-4593 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-4593?
Check the references section above for vendor advisories and patch information. Affected products include: Eclinicalworks Population Health.