Authenticated Billing Record Deletion in OpenEMR

Executive Summary

OpenEMR versions before 8.5.0 have a missing authorization flaw in diagnosis_full.php. Authenticated users can delete or clear any billing record by supplying a target billing ID in the id parameter with delete or clear mode. This allows attackers to deactivate charges for other patients and corrupt financial records.

Useful 0 Not Useful 0

Detection Guidance

Check OpenEMR logs for suspicious requests to diagnosis_full.php with delete or clear actions. Monitor for unauthorized billing record modifications or deletions in the database.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows authenticated users to manipulate billing records of other patients. Attackers could delete or clear charges, leading to financial losses, incorrect billing, and disruption of billing systems for patients and healthcare providers.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate compliance with GDPR and HIPAA by enabling unauthorized access and alteration of patient billing data. GDPR requires protection of personal data, while HIPAA mandates integrity and confidentiality of health information. Exploitation could lead to data breaches and non-compliance penalties.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade OpenEMR to version 8.5.0 or later to patch the vulnerability. Review and restrict user permissions to prevent unauthorized access to billing records.

Useful 0 Not Useful 0