Vulnerabilities > CVE-2010-1135 - Credentials Management vulnerability in Tiki Tikiwiki Cms/Groupware 4.0/4.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote attackers to gain access via cookie reuse.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |