Threats tagged 'ghsa-9cwc-jcxx-r43v'

OpenEMR versions from 7.0.1 up to but not including 8.4.0 contain a vulnerability in the OneTimeAuth.php component where enforcement of one-time use and maximum access count flags is bypassed. The flaw also fails to revoke consumed service authentication tokens and performs login PIN checks without rate limiting or strict comparison. This allows attackers with a captured token to replay it or brute-force the PIN, potentially opening patient portal sessions and exposing protected health information (PHI).