Improper Authorization Vulnerability in Star Practice Management Web Software
CVE-2020-28406

6.5MEDIUM

Key Information:

Vendor

Iris

Status
Star Practice Management
Vendor
CVE Published:
29 January 2021

What is CVE-2020-28406?

An improper authorization vulnerability in Star Practice Management Web version 2019.2.0.6 enables unauthorized users to access sensitive job details through the Audit Trail Feature. This flaw poses a security risk, allowing individuals without proper permissions to obtain information they should not be privy to. Organizations using this version are urged to implement necessary security measures to safeguard against unauthorized access.

References

https://www.starpracticemanagement.com/
https://excellium-services.com/cert-xlm-advisory/CVE-2020...
https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-28406

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2020-28406 : Improper Authorization Vulnerability in Star Practice Management Web Software