Security Advisory
CVE-2020-11821
5.3
MEDIUM
Vulnerability Description
In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hashing. Thus, an attacker can easily apply brute force on them.
Published Date
April 27, 2020
Official Source
NIST NVD Advisory