OpenEMR versions prior to 7.0.4 are vulnerable to an improper access control flaw that permits unauthorized modification of user profile data and potential account takeover.

The application fails to perform adequate authorization checks on the Profile Edit endpoint, allowing an authenticated user to manipulate request parameters such as pid or pubpid to target another user's account.

The vulnerability carries a CVSS score of 8.8, indicating a high level of severity due to the potential for unauthorized data modification and account takeover. In a medical environment, this could lead to the corruption of sensitive patient or provider records, resulting in significant privacy breaches, regulatory non-compliance, and loss of trust in the integrity of the health information system.

Immediate Action: Upgrade all instances of OpenEMR to version 7.0.4 or later to apply the necessary access control patches.

Proactive Monitoring: Review application logs for suspicious activity centered on the Profile Edit endpoint, specifically monitoring for unusual changes to user identifiers or account details.

Compensating Controls: Ensure that strict session management is enforced and consider implementing additional database-level auditing to detect unauthorized modifications to user profile tables.

Public Exploit Available: Unknown.

Given the potential for unauthorized account modification and the availability of a proof-of-concept, this vulnerability poses a significant risk to the integrity of medical records. Administrators must prioritize the upgrade to version 7.0.4 immediately to remediate the broken access control mechanism and secure the application against potential exploitation.