Lucene search
MitreCVELIST:CVE-2020-28401HistoryJan 29, 2021 - 6:07 a.m.
CVE-2020-28401
2021-01-2906:07:04
mitre
www.cve.org
1
improper authorization
star practice management
unauthorized access
wip details
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
28.4%
An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access WIP details about jobs he should not have access to.
Related
prion
prion
Authorization
2021-01-29 07:15:00
cnvd
cnvd
nvd
nvd
CVE-2020-28401
2021-01-29 07:15:16
cve
cve
CVE-2020-28401
2021-01-29 07:15:16
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
28.4%
Related for CVELIST:CVE-2020-28401