CVE-2020-11728

An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60

published April 15, 2020

CVSS
—
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Session management does not use a sufficiently hard-to-guess session key. Anyone who can guess the microsecond time (and the incrementing session_id) can impersonate a session.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01588 · 75.4th percentile
Published
2020-04-15T15:37Z
EPSS history
Timeline
  • 15 APR 15:37Z
    An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60
    cvelistv5