Description
In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hashing. Thus, an attacker can easily apply brute force on them.
Unscored
CVE-2020-11821
EUVD-2020-4163GHSA-7mvq-97q9-r9gg
In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hashing. Thus, an attac…
Published Apr 27, 2020 · Updated Aug 4, 2024 · Assigned by mitre