| Max CVSS | 7.5 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-11728 | 5.0 |
An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Session management does not use a sufficiently hard-to-guess session key. Anyone who can guess the microsecond time (and the incrementing session_id) can impersonate a sess
|
28-09-2020 - 18:15 | 15-04-2020 - 16:15 | |
| CVE-2020-11728 | 5.0 |
An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Session management does not use a sufficiently hard-to-guess session key. Anyone who can guess the microsecond time (and the incrementing session_id) can impersonate a sess
|
28-09-2020 - 18:15 | 15-04-2020 - 16:15 | |
| CVE-2020-11729 | 7.5 |
An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Long-term session cookies, uses to provide long-term session continuity, are not generated securely, enabling a brute-force attack that may be successful.
|
22-04-2020 - 18:51 | 15-04-2020 - 16:15 |