CVE-2020-11821

In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hashing

published April 27, 2020

CVSS
—
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hashing. Thus, an attacker can easily apply brute force on them.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01103 · 65.5th percentile
Published
2020-04-27T14:19Z
EPSS history
Timeline
  • 27 APR 14:19Z
    In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hashing
    cvelistv5