Davical - Andrew\'s Web Libraries CVE

Filtered by vendor Davical Subscribe

Filtered by product Andrew\'s Web Libraries

ALL

NONE (0.0) LOW (0.1 - 3.9) MEDIUM (4.0 - 6.9) HIGH (7.0 - 8.9) CRITICAL (9.0 - 10.0)

Total 1 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2020-11728	2 Davical, Debian	2 Andrew\'s Web Libraries, Debian Linux	2020-09-28	5.0 MEDIUM	7.5 HIGH
An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Session management does not use a sufficiently hard-to-guess session key. Anyone who can guess the microsecond time (and the incrementing session_id) can impersonate a session.

Vulnerabilities (CVE)