CWE Code: 255
Vulnerability Type: privilege_escalation
CVSS Score: 3.7
CWE Name:  Credentials Management
Summary: luci in red hat conga stores the user's username and password in a base64 encoded string in the __ac session cookie, which allows attackers to gain privileges by accessing this cookie.  note: this issue has been split due to different vulnerability types. use cve-2013-7347 for the incorrect enforcement of a user timeout.
Access Authentication: NONE
Access Complexity: HIGH
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2014-03-31
Last Modified Date: 2014-03-31