Vulnerabilities > CVE-2020-27739 - Insufficient Session Expiration vulnerability in Citadel Webcit 7.10/926
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack recently logged-in users' sessions. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |