CVE-2018-1000019: Command Injection
Published Feb 9, 2018
·Updated
OpenEMR version 5.0.0 contains a OS Command Injection vulnerability in faxdispatch.php that can result in OS command injection by an authenticated attacker with any role. This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher.
Affected Software
1 affected component
open-emr Openemr=5.0.0
Remediation
Patch Available
Event History
Feb 9, 2018
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-1000019?
CVE-2018-1000019 is considered a critical vulnerability due to its potential for OS command injection.
2
How do I fix CVE-2018-1000019?
To fix CVE-2018-1000019, upgrade to OpenEMR version 5.0.0 Patch 2 or higher.
3
Who is affected by CVE-2018-1000019?
Authenticated users with any role in OpenEMR version 5.0.0 are susceptible to CVE-2018-1000019.
4
What does CVE-2018-1000019 exploit?
CVE-2018-1000019 exploits a vulnerability in fax_dispatch.php, allowing OS command injection.
5
Is CVE-2018-1000019 specific to certain versions of OpenEMR?
Yes, CVE-2018-1000019 specifically affects OpenEMR version 5.0.0.