CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-27742

An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msg_confirm_move template. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 38.1%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.0

References

Products affected by CVE-2020-27742

Citadel » Webcit » Version: N/A

cpe:2.3:a:citadel:webcit:-
Citadel » Webcit » Version: 7.10

cpe:2.3:a:citadel:webcit:7.10
Citadel » Webcit » Version: 7.86

cpe:2.3:a:citadel:webcit:7.86
Citadel » Webcit » Version: 7.87

cpe:2.3:a:citadel:webcit:7.87
Citadel » Webcit » Version: 8.01

cpe:2.3:a:citadel:webcit:8.01
Citadel » Webcit » Version: 8.02

cpe:2.3:a:citadel:webcit:8.02
Citadel » Webcit » Version: 8.03

cpe:2.3:a:citadel:webcit:8.03
Citadel » Webcit » Version: 8.05

cpe:2.3:a:citadel:webcit:8.05
Citadel » Webcit » Version: 8.06

cpe:2.3:a:citadel:webcit:8.06
Citadel » Webcit » Version: 8.12

cpe:2.3:a:citadel:webcit:8.12
Citadel » Webcit » Version: 8.13

cpe:2.3:a:citadel:webcit:8.13
Citadel » Webcit » Version: 8.14

cpe:2.3:a:citadel:webcit:8.14
Citadel » Webcit » Version: 8.16

cpe:2.3:a:citadel:webcit:8.16
Citadel » Webcit » Version: 8.20

cpe:2.3:a:citadel:webcit:8.20
Citadel » Webcit » Version: 8.22

cpe:2.3:a:citadel:webcit:8.22
Citadel » Webcit » Version: 8.23

cpe:2.3:a:citadel:webcit:8.23
Citadel » Webcit » Version: 8.24

cpe:2.3:a:citadel:webcit:8.24
Citadel » Webcit » Version: 9.01

cpe:2.3:a:citadel:webcit:9.01
Citadel » Webcit » Version: 902

cpe:2.3:a:citadel:webcit:902
Citadel » Webcit » Version: 926

cpe:2.3:a:citadel:webcit:926

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-27742

Products

Pricing

Contact Us