Lucene search

Ubuntu.comUB:CVE-2020-27740

HistoryOct 28, 2020 - 12:00 a.m.

CVE-2020-27740

2020-10-2800:00:00

ubuntu.com

cve-2020-27740

remote attackers

valid users enumeration

vendor report

multiple security vulnerabilities

bugs

unix

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.003

Percentile

70.4%

JSON

Citadel WebCit through 926 allows unauthenticated remote attackers to
enumerate valid users within the platform. NOTE: this was reported to the
vendor in a publicly archived “Multiple Security Vulnerabilities in WebCit
926” thread.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=973385>

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchwebcit< anyUNKNOWN
ubuntu20.04noarchwebcit< anyUNKNOWN
ubuntu16.04noarchwebcit< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	webcit	< any	UNKNOWN
ubuntu	20.04	noarch	webcit	< any	UNKNOWN
ubuntu	16.04	noarch	webcit	< any	UNKNOWN

References

uncensored.citadel.org/readfwd?go=Citadel%20Security?start_reading_at=4592834

launchpad.net/bugs/cve/CVE-2020-27740

nvd.nist.gov/vuln/detail/CVE-2020-27740

security-tracker.debian.org/tracker/CVE-2020-27740

www.citadel.org/

www.cve.org/CVERecord?id=CVE-2020-27740

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.003

Percentile

70.4%

JSON

Related for UB:CVE-2020-27740