Lucene search
+L

10 matches found

NVD
NVD
•added 2019/07/09 5:15 p.m.•21 views

CVE-2019-11020

Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claimfiles/claimid URLs...

7.5CVSS7.6AI score0.01477EPSS
SaveExploits0References2
OSV
OSV
•added 2019/07/09 5:15 p.m.•13 views

CVE-2019-11020

Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claimfiles/claimid URLs...

7.5CVSS5.8AI score0.01477EPSS
SaveExploits0References2
CVE
CVE
•added 2019/07/09 5:00 p.m.•96 views

CVE-2019-11020

CVE-2019-11020 affects DDRT Dashcom Live. The issue is a lack of authentication in file-viewing components, enabling remote access to claim details via guessable URLs under dashboard/uploads/claim_files/claim_id_... Exploitation status is not detailed in the provided documents; CVSS vectors indic...

7.5CVSS7.6AI score0.01477EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2019/07/09 4:15 p.m.•18 views

Authentication flaw

Lack of authentication in case-exporting components in DDRT Dashcom Live through 2019-05-08 allows anyone to remotely access all claim details by visiting easily guessable exportpdf/allclaimdetail.php?claimid= URLs...

5CVSS7.6AI score0.01477EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/07/09 3:43 p.m.•32 views

CVE-2019-11019

Lack of authentication in case-exporting components in DDRT Dashcom Live through 2019-05-08 allows anyone to remotely access all claim details by visiting easily guessable exportpdf/allclaimdetail.php?claimid= URLs...

7.7AI score0.01477EPSS
SaveExploits0References2
CVE
CVE
•added 2019/07/09 3:43 p.m.•72 views

CVE-2019-11019

CVE-2019-11019 describes an authentication flaw in the DDRT Dashcom Live platform’s case-exporting components, allowing remote access to all claim details via easily guessable exportpdf/all_claim_detail.php?claim_id= URLs. The linked records consistently state a lack of authentication as the issu...

7.5CVSS7.3AI score0.01477EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2019/07/09 12:00 a.m.•2 views

PT-2019-12142

Name of the Vulnerable Software and Affected Versions DDRT Dashcom Live version 2019-05-09 Description The issue is related to a lack of authentication in file-viewing components, allowing unauthorized remote access to claim details. This can be achieved by visiting easily guessable URLs, such as...

7.5CVSS0.01477EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2019/07/09 12:00 a.m.•4 views

PT-2019-12141

Name of the Vulnerable Software and Affected Versions DDRT Dashcom Live versions prior to 2019-05-08 Description The issue is related to a lack of authentication in case-exporting components, allowing unauthorized access to claim details. By visiting easily guessable URLs, such as "exportpdf/all...

7.5CVSS0.01477EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/09 12:00 a.m.•2 views

CVE-2019-11020: Missing Authentication for Critical Function

Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claimfiles/claimid URLs...

7.5CVSS5.8AI score0.01477EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/09 12:00 a.m.•4 views

CVE-2019-11019: Missing Authentication for Critical Function

Lack of authentication in case-exporting components in DDRT Dashcom Live through 2019-05-08 allows anyone to remotely access all claim details by visiting easily guessable exportpdf/allclaimdetail.php?claimid= URLs...

7.5CVSS5.8AI score0.01477EPSS
SaveExploits0References2
Rows per page
Query Builder