An authorization flaw in the OpenMRS legacyui-api allows authenticated users to perform unauthorized administrative actions, posing a significant risk to system integrity.

The vulnerability is an improper authorization flaw (CWE-285) where administrative Direct Web Remoting (DWR) services are exposed to standard authenticated users. The specific method startHl7ArchiveMigration lacks the necessary capability checks to restrict access to administrative accounts.

The ability for non-administrative users to trigger internal migration services can lead to unauthorized system modifications and potential data corruption within the electronic medical record system. Given the CVSS score of 8.7, this is classified as a high-severity issue that could disrupt critical medical operations and compromise the integrity of sensitive patient data.

Immediate Action: Update the OpenMRS legacyui-api module to version 1.23.0 or 2.10.0 to implement the required authorization checks.

Proactive Monitoring: Review application access logs for any unauthorized calls to the startHl7ArchiveMigration method or other unexpected administrative DWR service activity.

Compensating Controls: If immediate patching is not feasible, restrict access to the affected module via network segmentation or by disabling the legacyui-api component if it is not strictly required for current operations.

Public Exploit Available: No

This vulnerability represents a significant authorization failure within a sensitive medical record environment. Organizations should prioritize updating the legacyui-api module to the fixed versions listed above to prevent unauthorized administrative actions and maintain the integrity of the OpenMRS platform.