Medium · 5.4 CVE-2020-28402 EUVD-2020-20861GHSA-fpmq-9j97-cq2c

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access …

Published Jan 29, 2021 · Updated May 30, 2025 · Assigned by mitre

Description

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access Launcher Configuration Panel.

References

https://www.starpracticemanagement.com/
https://excellium-services.com/cert-xlm-advisory/CVE-2020-28402
https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-28402