CVE-2010-5067

CVE-2010-5067 describes a vulnerability in Virtual War (VWar) 1.6.1 R2, where static session cookies are generated solely based on a user's password. This design flaw allows remote attackers to bypass session timeouts and logout actions, maintaining persistent access by reusing a known session cookie. With a CVSS score of 6.8 (medium severity), successful exploitation requires moderate attack complexity (AC:M) but can lead to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.