Security Advisory

CVE-2020-27739

9.8
CRITICAL

Vulnerability Description

A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack recently logged-in users' sessions. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread.
Published Date October 28, 2020
Official Source NIST NVD Advisory