CVE-2014-8072

Name of the Vulnerable Software and Affected Versions OpenMRS version 2.1 Standalone Edition

Description The administration module in OpenMRS allows remote authenticated users to obtain read access via a direct request to "/admin".

Recommendations For OpenMRS version 2.1 Standalone Edition, restrict access to the administration module to prevent unauthorized read access. As a temporary workaround, consider restricting direct requests to the "/admin" endpoint until a patch is available.