Lucene search
K

6 matches found

NVD
NVD
added 2019/07/09 5:15 p.m.9 views

CVE-2019-11020

Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claimfiles/claimid URLs...

7.5CVSS7.6AI score0.0029EPSS
Exploits0References2
OSV
OSV
added 2019/07/09 5:15 p.m.1 views

CVE-2019-11020

Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claimfiles/claimid URLs...

7.5CVSS5.8AI score0.0029EPSS
Exploits0References2
CVE
CVE
added 2019/07/09 5:0 p.m.80 views

CVE-2019-11020

CVE-2019-11020 affects DDRT Dashcom Live. The issue is a lack of authentication in file-viewing components, enabling remote access to claim details via guessable URLs under dashboard/uploads/claim_files/claim_id_... Exploitation status is not detailed in the provided documents; CVSS vectors indic...

7.5CVSS7.6AI score0.0029EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2019/07/09 4:15 p.m.10 views

Authentication flaw

Lack of authentication in case-exporting components in DDRT Dashcom Live through 2019-05-08 allows anyone to remotely access all claim details by visiting easily guessable exportpdf/allclaimdetail.php?claimid= URLs...

5CVSS7.6AI score0.0029EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/07/09 3:43 p.m.12 views

CVE-2019-11019

Lack of authentication in case-exporting components in DDRT Dashcom Live through 2019-05-08 allows anyone to remotely access all claim details by visiting easily guessable exportpdf/allclaimdetail.php?claimid= URLs...

7.7AI score0.0029EPSS
Exploits0References2
CVE
CVE
added 2019/07/09 3:43 p.m.58 views

CVE-2019-11019

CVE-2019-11019 describes an authentication flaw in the DDRT Dashcom Live platform’s case-exporting components, allowing remote access to all claim details via easily guessable exportpdf/all_claim_detail.php?claim_id= URLs. The linked records consistently state a lack of authentication as the issu...

7.5CVSS7.6AI score0.0029EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder