Unrated severityNVD Advisory· Published Oct 8, 2012· Updated Apr 29, 2026
CVE-2010-5067
CVE-2010-5067
Description
Virtual War (aka VWar) 1.6.1 R2 uses static session cookies that depend only on a user's password, which makes it easier for remote attackers to bypass timeout and logout actions, and retain access for a long period of time, by leveraging knowledge of a session cookie.
Affected products
1- cpe:2.3:a:vwar:virtual_war:1.6.1:r2:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- dmcdonald.net/vwar.txtnvdExploit
- seclists.org/fulldisclosure/2010/Aug/235nvdExploit
News mentions
0No linked articles in our index yet.