CVE-2020-11729

libawl-php: An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60

CVE-2020-11729 is fixed in libawl-php on 1 platform by libawl-php 0.60-1+deb10u1ubuntu1 (version 0.60-1+deb10u1ubuntu1), released April 15, 2020. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0216
82nd percentile

An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Long-term session cookies, uses to provide long-term session continuity, are not generated securely, enabling a brute-force attack that may be successful.

Where it's fixed

ProductFixed inFixReleased
Linux
libawl-php · Ubuntu 20.04 LTS (focal) 0.60-1+deb10u1ubuntu1 libawl-php 0.60-1+deb10u1ubuntu1 Apr 15, 2020

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.