← CVE Intelligence

CVE-2011-0910

n/a / n/a PUBLISHED

Description (CNA)

The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks.

Affected (CNA)

Vendor / productVersions
n/a / n/aaffected n/a

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.