Description

The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks.

Remediation

References

CVE-2011-0910

Related Vulnerabilities

WordPress Plugin Responsive Menu-Create Mobile-Friendly Menu Multiple Vulnerabilities (4.0.3)

WordPress Plugin DeMomentSomTres Subscribe Cross-Site Scripting (201909190900)

Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-7857)

Oracle Application Server Other Vulnerability (CVE-2002-1630)

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-1432)

Severity

Medium

Classification

CVE-2011-0910

Tags

Missing Update Known Vulnerabilities