In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hashing. Thus, an attacker can easily apply brute force on them.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-04-27T14:19:16

Updated: 2024-08-04T11:42:00.508Z

Reserved: 2020-04-16T00:00:00

Link: CVE-2020-11821

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-04-27T15:15:12.517

Modified: 2024-11-21T04:58:42.177

Link: CVE-2020-11821

cve-icon Redhat

No data.