Authorization

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access Launcher Configuration Panel...

Authorization

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access WIP details about jobs he should not have access to...

CVE-2020-28406

CVE-2020-28406 affects Star Practice Management Web version 2019.2.0.6, with an improper authorization flaw that lets an unauthorized user view details about jobs they should not access via the Audit Trail feature. The connected records confirm the same vulnerability description across multiple s...

CVE-2020-28405

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to change the privileges of any user of the application. This can be used to grant himself the administrative role or remove all administrative accounts of the...

CVE-2020-28404

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access the Billing page without the appropriate privileges...

CVE-2020-28404

CVE-2020-28404 affects Star Practice Management Web (version 2019.2.0.6). The connected documents describe an improper authorization vulnerability that allows an unauthorized user to access the Billing page without the appropriate privileges, indicating an access-control error in the web applicat...

CVE-2020-28402

CVE-2020-28402 affects Star Practice Management Web (v2019.2.0.6). The issue is an improper authorization that could allow an unauthorized user to access the Launcher Configuration Panel. Documented by multiple sources (NVD, Red Hat, CNVD and others) with no public exploitation details or fixes p...

CVE-2020-28401

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access WIP details about jobs he should not have access to...

CVE-2020-28405: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to change the privileges of any user of the application. This can be used to grant himself the administrative role or remove all administrative accounts of the...

CVE-2020-28404: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access the Billing page without the appropriate privileges...

CVE-2020-28406: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access details about jobs he should not have access to via the Audit Trail Feature...

CVE-2020-28402: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access Launcher Configuration Panel...

CVE-2020-28401: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access WIP details about jobs he should not have access to...

PT-2021-11519

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An issue exists where improper authorization allows unauthorized users to access Work In Progress WIP details about jobs they should not have access to. Recommendations: For version...

PT-2021-11520

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An improper authorization issue exists, allowing unauthorized users to access the Launcher Configuration Panel. Recommendations: For version 2019.2.0.6, restrict access to the...

PT-2021-11522

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An improper authorization issue exists, allowing unauthorized users to access the Billing page without the necessary privileges. Recommendations: For version 2019.2.0.6, update to a...

CentOS 8 : GNOME (CESA-2019:3553)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3553 advisory. - webkitgtk: HTTP proxy setting deanonymization information disclosure CVE-2019-11070 - evince: uninitialized memory use in function tiffdocumentrender...

PT-2021-11524

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An issue exists where improper authorization allows unauthorized users to access job details they should not have access to, specifically through the Audit Trail Feature...

PT-2021-11523

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An issue exists where improper authorization allows an unauthorized user to modify user privileges within the application. This can lead to the unauthorized user granting themselves...

CVE-2021-3309

packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Authority trust store,...