CVE-2019-11020

CVE-2019-11020 affects DDRT Dashcom Live. The issue is a lack of authentication in file-viewing components, enabling remote access to claim details via guessable URLs under dashboard/uploads/claim_files/claim_id_... Exploitation status is not detailed in the provided documents; CVSS vectors indic...

CVE-2019-11019

CVE-2019-11019 describes an authentication flaw in the DDRT Dashcom Live platform’s case-exporting components, allowing remote access to all claim details via easily guessable exportpdf/all_claim_detail.php?claim_id= URLs. The linked records consistently state a lack of authentication as the issu...