PT-2021-11522

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An improper authorization issue exists, allowing unauthorized users to access the Billing page without the necessary privileges. Recommendations: For version 2019.2.0.6, update to a...

PT-2021-11519

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An issue exists where improper authorization allows unauthorized users to access Work In Progress WIP details about jobs they should not have access to. Recommendations: For version...

PT-2021-11523

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An issue exists where improper authorization allows an unauthorized user to modify user privileges within the application. This can lead to the unauthorized user granting themselves...

CVE-2020-28406: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access details about jobs he should not have access to via the Audit Trail Feature...

PT-2021-11524

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An issue exists where improper authorization allows unauthorized users to access job details they should not have access to, specifically through the Audit Trail Feature...

CVE-2020-28404: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access the Billing page without the appropriate privileges...

PT-2021-11521

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: A Cross-Site Request Forgery CSRF issue exists, allowing an attacker to change user privileges, potentially granting themselves administrative roles or removing administrative...

CVE-2020-28401: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access WIP details about jobs he should not have access to...