How severe is CVE-2020-28406?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Iris Star Practice Management

CVE-2020-28406

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access details about jobs he should not have access to via the Audit Trail Feature.

EPSS: 0.013 (67.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Iris Star_practice_management — versions 2019.2.0.6
N/a — versions n/a

References

cve@mitre.org (Product)
cve@mitre.org (Third Party Advisory)
cve@mitre.org

Frequently asked questions

What is CVE-2020-28406?: CVE-2020-28406 is a medium-severity vulnerability in Iris Star Practice Management. CVSS score: 6.5/10. Published 2021-01-29.
How severe is CVE-2020-28406?: Medium severity. CVSS v3 base score is 6.5 out of 10.