Lucene search

K
cvelistMitreCVELIST:CVE-2020-11728
HistoryApr 15, 2020 - 3:37 p.m.

CVE-2020-11728

2020-04-1515:37:12
mitre
www.cve.org

8.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.9%

An issue was discovered in DAViCal Andrew’s Web Libraries (AWL) through 0.60. Session management does not use a sufficiently hard-to-guess session key. Anyone who can guess the microsecond time (and the incrementing session_id) can impersonate a session.

8.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.9%