description: OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted request to initiate a session with limited functionality, which may allow execution of admin functions such as SQL queries.
problem types: AUTHENTICATION BYPASS USING AN ALTERNATE PATH OR CHANNEL CWE-288
affected:
{
product: OpenClinic GA
vendor: n/a
versions:
status: affected, version: Versions 5.09.02 and 5.89.05b
}