In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.
NVD-CWE-noinfo