Vulnerabilities > CVE-2020-28401 - Unspecified vulnerability in Iris Star Practice Management 2019.2.0.6

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
iris

Summary

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access WIP details about jobs he should not have access to.

Vulnerable Configurations

Part Description Count
Application
Iris
1