Care Coordination Document Reclassification in OpenEMR

Executive Summary

OpenEMR before version 8.5.0 has a missing authorization flaw in the Care Coordination CCDA and CCR import controllers. This flaw allows authenticated non-administrative users with Care Coordination access to recategorize protected patient documents by moving them into the import category without verifying access to the original document. They can then download these documents through normal access control list checks.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows unauthorized users to access and download protected patient documents they should not have permission to view. It compromises patient confidentiality and privacy by enabling unauthorized recategorization and retrieval of sensitive health information.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates compliance with GDPR and HIPAA due to unauthorized access to protected health information. GDPR requires strict access controls and patient data protection, while HIPAA mandates safeguards for protected health information. The flaw enables breaches of these requirements.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade OpenEMR to version 8.5.0 or later to address the missing authorization flaw in Care Coordination CCDA and CCR import controllers.

Useful 0 Not Useful 0