Missing Authorization in OpenEMR Ensora eRx Integration

Executive Summary

This vulnerability affects OpenEMR versions before 8.5.0 when the Ensora eRx integration is enabled. It allows authenticated staff without specific patient or prescription permissions to access sensitive patient data by directly requesting eRx.php. Attackers can retrieve patient demographics, medications, allergies, and trigger synchronization changes.

Useful 0 Not Useful 0

Detection Guidance

Check OpenEMR versions prior to 8.5.0 with Ensora eRx integration enabled. Review logs for unauthorized access attempts to eRx.php by authenticated users without patients/rx permission. Look for suspicious XML data submissions to configured eRx vendor endpoints.

Useful 0 Not Useful 0

Impact Analysis

Unauthorized users can access and expose patient data including names, addresses, prescriptions, and allergies. They can also trigger synchronization updates without proper permissions, potentially leading to data leaks or incorrect records.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates compliance with GDPR and HIPAA due to unauthorized access to protected health information. It compromises confidentiality and could lead to legal penalties, data breach notifications, and reputational damage.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade OpenEMR to version 8.5.0 or later to enforce patients/rx permission checks in eRx.php. If immediate upgrade is not possible, disable the Ensora eRx integration or restrict access to eRx.php for unauthorized users.

Useful 0 Not Useful 0