OpenEMR 4.2.0 Authentication Bypass

OpenEMR versions 4.2.0 and 4.2.0 patch 1 suffer from an authentication bypass vulnerability.