CVE-2017-1000241: High severity open-emr Openemr vulnerability
Published Nov 17, 2017
·Updated
The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability. This vulnerability can allow an authenticated non-administrator users to view and modify information only accessible to administrators.
Affected Software
1 affected component
open-emr Openemr<=5.0.1
Event History
Nov 17, 2017
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-1000241?
CVE-2017-1000241 has a medium severity rating due to its potential for allowing privilege escalation.
2
How do I fix CVE-2017-1000241?
To fix CVE-2017-1000241, upgrade OpenEMR to version 5.0.2 or later.
3
Who is affected by CVE-2017-1000241?
CVE-2017-1000241 affects authenticated non-administrator users of OpenEMR versions 5.0.0 to 5.0.1-dev and prior.
4
What kind of access does CVE-2017-1000241 allow?
CVE-2017-1000241 allows non-administrator users to view and modify information typically restricted to administrators.
5
Is CVE-2017-1000241 a recent vulnerability?
CVE-2017-1000241 was publicly disclosed in 2017 and is considered a legacy vulnerability.