CVE-2019-11020

Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claimfiles/claimid URLs...

CVE-2019-11020

CVE-2019-11020 affects DDRT Dashcom Live. The issue is a lack of authentication in file-viewing components, enabling remote access to claim details via guessable URLs under dashboard/uploads/claim_files/claim_id_... Exploitation status is not detailed in the provided documents; CVSS vectors indic...