Session Expiration Bypass in OpenEMR

Executive Summary

OpenEMR before version 8.5.0 has a session expiration flaw where the Eye Exam form's read-only poll does not reset the idle timer properly. The update_READONLY() function resets the timer every 15 seconds, preventing automatic logoff. Attackers with physical access to an unattended workstation can exploit this to maintain an active session and view patient health information.

Useful 0 Not Useful 0

Detection Guidance

Check if OpenEMR versions before 8.5.0 are installed by reviewing system logs or running version checks. Monitor for active Eye Exam form sessions that do not reset the idle timer. Look for continuous polling requests from the Eye Exam form without the skip_timeout_reset flag.

Useful 0 Not Useful 0

Impact Analysis

If you leave an OpenEMR workstation unattended while the Eye Exam form is open in read-only mode, an attacker with physical access could access your active session and view sensitive patient health information. This could lead to unauthorized data exposure or privacy breaches.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability poses a significant risk to HIPAA compliance as it allows unauthorized access to protected health information (PHI) due to insufficient session expiration. Under GDPR, it could lead to unauthorized data access, potentially violating principles of data protection and user rights.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade OpenEMR to version 8.5.0 or later to address the session timeout bypass. Alternatively, modify the Eye Exam form's polling requests to include the skip_timeout_reset flag. Ensure physical access controls are in place to prevent unauthorized workstation use.

Useful 0 Not Useful 0