CVE-2020-28403

A Cross-Site Request Forgery CSRF vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an attacker to change the privileges of any user of the application. This can be used to grant himself administrative role or remove the administrative account of the application...

Authorization

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to change the privileges of any user of the application. This can be used to grant himself the administrative role or remove all administrative accounts of the...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an attacker to change the privileges of any user of the application. This can be used to grant himself administrative role or remove the administrative account of the application...

CVE-2020-28403

The CVE-2020-28403 entry concerns Star Practice Management Web (v2019.2.0.6) and describes a Cross-Site Request Forgery (CSRF) vulnerability that can allow an attacker to change privileges for any user, including granting themselves admin or removing an admin account. The provided connected docum...

CVE-2020-28402

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access Launcher Configuration Panel...

CVE-2020-28402

CVE-2020-28402 affects Star Practice Management Web (v2019.2.0.6). The issue is an improper authorization that could allow an unauthorized user to access the Launcher Configuration Panel. Documented by multiple sources (NVD, Red Hat, CNVD and others) with no public exploitation details or fixes p...

CVE-2020-28406: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access details about jobs he should not have access to via the Audit Trail Feature...

CVE-2020-28405: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to change the privileges of any user of the application. This can be used to grant himself the administrative role or remove all administrative accounts of the...

Star Computer Star Practice Management Web 访问控制错误漏洞

Star Computer Star Practice Management Web is a web service used for time-based billing by Star Computer UK.An access control error vulnerability exists in Star Practice Management Web version 2019.2.0.6, which could be exploited by an attacker to The vulnerability can be exploited to change the...

PT-2021-11521

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: A Cross-Site Request Forgery CSRF issue exists, allowing an attacker to change user privileges, potentially granting themselves administrative roles or removing administrative...

CVE-2020-28402: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access Launcher Configuration Panel...

CVE-2020-28401: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access WIP details about jobs he should not have access to...

CVE-2020-28404: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access the Billing page without the appropriate privileges...

PT-2021-11519

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An issue exists where improper authorization allows unauthorized users to access Work In Progress WIP details about jobs they should not have access to. Recommendations: For version...

PT-2021-11520

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An improper authorization issue exists, allowing unauthorized users to access the Launcher Configuration Panel. Recommendations: For version 2019.2.0.6, restrict access to the...

PT-2021-11524

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An issue exists where improper authorization allows unauthorized users to access job details they should not have access to, specifically through the Audit Trail Feature...

PT-2021-11523

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An issue exists where improper authorization allows an unauthorized user to modify user privileges within the application. This can lead to the unauthorized user granting themselves...

PT-2021-11522

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An improper authorization issue exists, allowing unauthorized users to access the Billing page without the necessary privileges. Recommendations: For version 2019.2.0.6, update to a...

CVE-2020-28403: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an attacker to change the privileges of any user of the application. This can be used to grant himself administrative role or remove the administrative account of the application...