Critical OpenEMR vulnerabilities may allow attackers to access patients’ health records

Critical vulnerabilities discovered in OpenEMR can be chained to gain code execution on a server running a vulnerable version of the popular open-source electronic health record system. Discovered, privately reported and now publicly documented by rese… Continue reading Critical OpenEMR vulnerabilities may allow attackers to access patients’ health records

OpenEMR vulnerabilities put patients’ info, medical records at risk

A slew of vulnerabilities in OpenEMR allowed attackers to access random patients’ health records, view data from a target database, escalate their privileges on the server, execute system commands, and more. What is OpenEMR? OpenEMR is a free and… Continue reading OpenEMR vulnerabilities put patients’ info, medical records at risk

Millions of Health Records At Risk Due to Vulnerable OpenEMR Configurations

Researchers from security firm Risk Based Security have found that many installations of OpenEMR, a popular open-source electronic health records management application, contain the original setup script. This gaffe exposes the system to a complete com… Continue reading Millions of Health Records At Risk Due to Vulnerable OpenEMR Configurations