Security Advisory

CVE-2020-27227

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-04-13 14:12:45

Last updated 2024-08-04 16:11:36

Assigner talos

CVSS score 10.0

State PUBLISHED

Description

An exploitable unatuhenticated command injection exists in the OpenClinic GA 5.173.3. Specially crafted web requests can cause commands to be executed on the server. An attacker can send a web request with parameters containing specific parameter to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and compromise underlying operating system.

← Browse all CVEs View on cve.org ↗