Vulnerabilities > CVE-2010-5067 - Credentials Management vulnerability in Vwar Virtual WAR 1.6.1
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Virtual War (aka VWar) 1.6.1 R2 uses static session cookies that depend only on a user's password, which makes it easier for remote attackers to bypass timeout and logout actions, and retain access for a long period of time, by leveraging knowledge of a session cookie.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |