Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2011-0910

The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks.

  • Published: Feb 8, 2011
  • Updated: Apr 13, 2023
  • CVE: CVE-2011-0910
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.4
  • AV:N/AC:L/Au:N/C:P/I:P/A:N

No CWE or OWASP classifications available.

Software From Fixed in
vanillaforums / vanilla 2.0.16 2.0.16.x
vanillaforums / vanilla 2.0.9 2.0.9.x
vanillaforums / vanilla 2.0.10 2.0.10.x
vanillaforums / vanilla 2.0.11 2.0.11.x
vanillaforums / vanilla 2.0.12 2.0.12.x
vanillaforums / vanilla 2.0.13 2.0.13.x
vanillaforums / vanilla 2.0.14 2.0.14.x
vanillaforums / vanilla 2.0.15 2.0.15.x
vanillaforums / vanilla 2.0.17 2.0.17.x
vanillaforums / vanilla 2.0.17.1 2.0.17.1.x
vanillaforums / vanilla 2.0.17.2 2.0.17.2.x
vanillaforums / vanilla 2.0.17.3 2.0.17.3.x
vanillaforums / vanilla 2.0.17.4 2.0.17.4.x
vanillaforums / vanilla - 2.0.17.5.x