The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2011-02-08 21:00
Updated : 2024-02-04 17:54
NVD link : CVE-2011-0910
Mitre link : CVE-2011-0910
CVE.ORG link : CVE-2011-0910
JSON object : View
Products Affected
vanillaforums
- vanilla
CWE