CVE-2025-32967
OpenEMR doesn't log password administration properly
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
OpenEMR doesn't log password administration properly
OpenEMR is a free and open source electronic health records and medical practice management application. A logging oversight in versions prior to 7.0.3.4 allows password change events to go unrecorded on the client-side log viewer, preventing administrators from auditing critical actions. This weakens traceability and opens the system to undetectable misuse by insiders or attackers. Version 7.0.3.4 contains a patch for the issue.
Reserved 2025-04-14 | Published 2025-05-23 | Updated 2025-05-23 | Assigner GitHub_Mgithub.com/...penemr/security/advisories/GHSA-7qj6-jxfc-xw4v
Support options
