PT-2020-16793 · Citadel · Citadel Webcit

Published 2020-10-28 · Updated 2020-11-04 · CVE-2020-27740

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citadel WebCit versions through 926

Description The issue allows unauthenticated remote attackers to enumerate valid users within the platform. It was reported to the vendor in a publicly archived thread titled "Multiple Security Vulnerabilities in WebCit 926".

Recommendations For Citadel WebCit versions through 926, consider restricting access to sensitive user information until a patch is available. As a temporary workaround, consider implementing additional authentication measures to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2020-27740

Affected Products

Citadel Webcit

References · 8

• 🔥 http://uncensored.citadel.org/readfwd?go=Citadel%20Security?start_reading_at=4592834 · Exploit
• https://citadel.org · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-27740 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-27740 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-27740 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-27740 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-27740 · Security Note
• https://t.me/cvenotify/5131 · Telegram Post