Improper Authorization in OpenEMR Drug Dispensing Function

Executive Summary

This vulnerability in OpenEMR versions before 8.5.0 allows authenticated users with read-only drug administration permissions to dispense medication and modify inventory. The issue occurs because the system checks only for admin/drugs view permission instead of write permission before dispensing drugs. Attackers can send crafted GET requests to the dispense_drug.php endpoint with parameters like drug_id, quantity, and encounter to create false dispensing records and reduce inventory.

Useful 0 Not Useful 0

Detection Guidance

Check OpenEMR logs for suspicious GET requests to interface/drugs/dispense_drug.php with parameters like drug_id, quantity, fee, and encounter. Monitor inventory discrepancies and unauthorized dispensing records in the system.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to inaccurate medication history, falsified pharmacy records, and manipulated inventory levels. Attackers could create false dispensing records without proper authorization, potentially causing stock shortages or incorrect patient treatment records. The impact includes compromised pharmacy operations and unreliable audit trails.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate compliance with regulations like HIPAA by allowing unauthorized changes to medication records, compromising patient safety and data integrity. It may also affect GDPR compliance by enabling unauthorized data manipulation in systems handling personal health information.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade OpenEMR to version 8.5.0 or later. Review and restrict user permissions to ensure write access is required for dispensing medications. Implement additional validation checks in dispense_drug.php to enforce proper authorization.

Useful 0 Not Useful 0