Vulnerability Description
OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass the system’s account lockout protection, which may allow brute force password attacks.
CVSS Score
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openclinic Ga Project | Openclinic Ga | 5.09.02 |
Related Weaknesses (CWE)
References
- https://us-cert.cisa.gov/ics/advisories/icsma-20-184-01Third Party AdvisoryUS Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsma-20-184-01Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2020-14484?
CVE-2020-14484 is a vulnerability with a CVSS score of 9.8 (CRITICAL). OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass the system’s account lockout protection, which may allow brute force password attacks.
How severe is CVE-2020-14484?
CVE-2020-14484 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-14484?
Check the references section above for vendor advisories and patch information. Affected products include: Openclinic Ga Project Openclinic Ga.