CVE-2023-54347 - Vulnerability Analysis

Overview

OpenEMR 7.0.1 contains a broken authentication vulnerability caused by lack of effective rate limiting on the main login endpoint, letting attackers bypass account lockout and perform brute force attacks.

Severity & Score

Impact

Attackers can bypass rate limiting to perform brute force attacks, potentially leading to unauthorized access.

Mitigation

Update to the latest version with effective rate limiting and account lockout protections.

References

• https://github.com/openemr/openemr/archive/refs/tags/v7_0_1.tar.gz
• https://www.exploit-db.com/exploits/51413
• https://www.open-emr.org/
• https://www.vulncheck.com/advisories/openemr-authentication-brute-force-mitigation-bypass

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner