CVE-2020-27740

Name of the Vulnerable Software and Affected Versions Citadel WebCit versions through 926

Description The issue allows unauthenticated remote attackers to enumerate valid users within the platform. It was reported to the vendor in a publicly archived thread titled "Multiple Security Vulnerabilities in WebCit 926".

Recommendations For Citadel WebCit versions through 926, consider restricting access to sensitive user information until a patch is available. As a temporary workaround, consider implementing additional authentication measures to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.