Security Advisory
CVE-2020-11728
7.5
HIGH
Vulnerability Description
An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Session management does not use a sufficiently hard-to-guess session key. Anyone who can guess the microsecond time (and the incrementing session_id) can impersonate a session.
Published Date
April 15, 2020
Official Source
NIST NVD Advisory