USN-4539-1: AWL vulnerability
Published Sep 24, 2020
·Updated
Andrew Bartlett discovered that DAViCal Andrew's Web Libraries (AWL) did not properly manage session keys. An attacker could possibly use this issue to impersonate a session. (CVE-2020-11728)
Affected Software
0 affected components
Event History
Feb 23, 2026
Advisory Published
via Ubuntu·06:42 PM
Data Sourced
via Ubuntu·06:42 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of USN-4539-1?
The severity of USN-4539-1 is categorized as high due to the potential for session impersonation by attackers.
2
How do I fix USN-4539-1?
To fix USN-4539-1, update the libawl-php package to version 0.60-1+deb10u1ubuntu1 or later.
3
What type of vulnerability is USN-4539-1?
USN-4539-1 is a session management vulnerability allowing potential session key impersonation.
4
Who discovered USN-4539-1?
USN-4539-1 was discovered by Andrew Bartlett.
5
Which software is affected by USN-4539-1?
USN-4539-1 affects the libawl-php package on Ubuntu 20.04.