Vulnerability Details : CVE-2020-27742
An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msg_confirm_move template. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread.
Threat overview for CVE-2020-27742
Top countries where our scanners detected CVE-2020-27742
Top open port discovered on systems with this issue
80
IPs affected by CVE-2020-27742 85
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2020-27742!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2020-27742
0.16%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 52 %
Percentile, the proportion of vulnerabilities that are scored at or less