CVE-2018-10573 - interface/fax/fax_dispatch.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the scan parameter

Back Back to CVE browser

HIGH

interface/fax/fax_dispatch.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the scan parameter

Published Apr 30, 2018

8.8

HIGH

CVSS 3.0

EPSS 2.62%

Description

interface/fax/fax_dispatch.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the scan parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

https://csticsfrontline.wordpress.com/2018/05/24/openemr-%E5%BC%B1%E9%BB%9E%E5%88%86%E6%9E%90/
x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-2645
Advisory
https://github.com/openemr/openemr/commit/699e3c2ef68545357cac714505df1419b8bf2051
x_refsource_MISCPatchThird Party Advisory
https://github.com/openemr/openemr/issues/1518
x_refsource_MISCIssue TrackingThird Party Advisory
https://github.com/openemr/openemr/pull/1519
x_refsource_MISCIssue TrackingPatchThird Party Advisory
https://www.open-emr.org/wiki/index.php/Release_Features#Version_5.0.1
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://csticsfrontline.wordpress.com/2018/05/24/openemr-%E5%BC%B1%E9%BB%9E%E5%88%86%E6%9E%90/		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-2645		Advisory
https://github.com/openemr/openemr/commit/699e3c2ef68545357cac714505df1419b8bf2051		x_refsource_MISCPatchThird Party Advisory
https://github.com/openemr/openemr/issues/1518		x_refsource_MISCIssue TrackingThird Party Advisory
https://github.com/openemr/openemr/pull/1519		x_refsource_MISCIssue TrackingPatchThird Party Advisory
https://www.open-emr.org/wiki/index.php/Release_Features#Version_5.0.1		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 30, 2018

Updated Aug 5, 2024

Reserved Apr 30, 2018

Link CVE-2018-10573

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-10573

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Apr 30, 2018

Updated Aug 5, 2024

Link EUVD-2018-2645

GitHub

No data