OpenEMR Missing Authorization Allows PHI Exposure

Executive Summary

This vulnerability is a missing authorization flaw in OpenEMR versions before 8.5.0. It affects print_referral.php and trend_form.php, allowing low-privileged users to access patient Protected Health Information (PHI) without proper permissions. Attackers can request these endpoints with arbitrary patient IDs to retrieve sensitive data like demographics, insurance details, and vitals history.

Useful 0 Not Useful 0

Detection Guidance

Check OpenEMR versions before 8.5.0 for vulnerable files print_referral.php and trend_form.php. Test by sending direct requests to these endpoints with arbitrary patient_id values and verify if sensitive PHI is returned without proper authorization.

Useful 0 Not Useful 0

Impact Analysis

Unauthorized users can access sensitive patient data, including PHI, insurance information, and medical history. This enables identity theft, fraud, or further exploitation. The flaw also allows attackers to enumerate patient IDs, expanding the scope of data disclosure.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates HIPAA due to unauthorized PHI access and GDPR due to improper handling of personal data. It undermines patient privacy rights and could lead to legal penalties, fines, or reputational damage for organizations failing to protect sensitive health information.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade to OpenEMR 8.5.0 or later if available. If not, implement ACL checks in print_referral.php and trend_form.php to enforce patients:med permission. Restrict access to these files and monitor for unauthorized requests to the endpoints.

Useful 0 Not Useful 0