OpenEMR Broken Access Control Vulnerability Allowing Unauthorized Access to eRx Error Logs

A broken access control vulnerability has been identified in OpenEMR versions prior to and including 8.0.0.3. This vulnerability allows low-privilege users to view and download Ensora eRx error logs without proper authorization checks. The issue compromises system confidentiality by exposing sensitive information, potentially leading to unauthorized data disclosure and misuse.

Impact

Exploitation of this vulnerability allows low-privilege users to access administrative data, bypassing role-based access controls and exposing sensitive information.

Reproduction

To reproduce this vulnerability, log into OpenEMR as a low-privilege user, such as a physician. Navigate to the eRx log viewer interface. Despite lacking administrative privileges, the user will be able to access and download eRx error logs, demonstrating the absence of necessary authorization checks.