5.3
CVSSv3

CVE-2020-27740

Published: 28/10/2020 Updated: 04/11/2020
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Citadel WebCit through 926 allows unauthenticated remote malicious users to enumerate valid users within the platform. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

citadel webcit

Vendor Advisories

Debian Bug report logs - #973385 CVE-2020-27739 CVE-2020-27740 CVE-2020-27741 CVE-2020-27742 Package: src:webcit; Maintainer for src:webcit is Debian QA Group <packages@qadebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Thu, 29 Oct 2020 18:51:03 UTC Severity: grave Tags: security, upstream Found ...