Difference between revisions of "Critical Security Fix for CVE-2017-16540"
From OpenEMR Project Wiki
Bradymiller (talk | contribs) |
Bradymiller (talk | contribs) |
||
| (3 intermediate revisions by the same user not shown) | |||
| Line 2: | Line 2: | ||
:In order to protect yourself from this vulnerability: | :In order to protect yourself from this vulnerability: | ||
:*If using OpenEMR 5.0.0: | ::*If using OpenEMR 5.0.0: | ||
::#Update to the most recent patch | :::#Update to the most recent patch via following instructions: [[OpenEMR Patches]] | ||
::# | :::#Remove the setup.php file from the openemr web directory (if you need this file in the future, then can download it at [https://raw.githubusercontent.com/openemr/openemr/rel-500/setup.php setup.php]). | ||
:*If using OpenEMR 4.2.2 or lower: | ::*If using OpenEMR 4.2.2 or lower: | ||
::#Remove the setup.php file from the openemr web directory. | :::#Remove the setup.php file from the openemr web directory. | ||
Latest revision as of 08:54, 7 November 2017
- There is a critical security vulnerability in OpenEMR before 5.0.0 Patch 5 . More details can be found here: https://nvd.nist.gov/vuln/detail/CVE-2017-16540
- In order to protect yourself from this vulnerability:
- If using OpenEMR 5.0.0:
- Update to the most recent patch via following instructions: OpenEMR Patches
- Remove the setup.php file from the openemr web directory (if you need this file in the future, then can download it at setup.php).
- If using OpenEMR 4.2.2 or lower:
- Remove the setup.php file from the openemr web directory.
