Lucene search

K
osvGoogleOSV:CVE-2020-11728
HistoryApr 15, 2020 - 4:15 p.m.

CVE-2020-11728

2020-04-1516:15:16
Google
osv.dev
1

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.9%

An issue was discovered in DAViCal Andrew’s Web Libraries (AWL) through 0.60. Session management does not use a sufficiently hard-to-guess session key. Anyone who can guess the microsecond time (and the incrementing session_id) can impersonate a session.

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.9%