CVE-2010-4568

CVE-2010-4568 describes a vulnerability in Bugzilla versions 2.14 through 4.0rc2 where insufficient randomization in cookie and token generation allows remote attackers to gain unauthorized access to user accounts. This vulnerability has a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been identified, and community discussion is minimal, the underlying weakness in random value generation poses a significant risk.