CVE-2020-11821

Name of the Vulnerable Software and Affected Versions Rukovoditel version 2.5.2

Description The issue concerns the storage of users' passwords and usernames in a cookie, which uses URL encoding, base64 encoding, and hashing. This makes it possible for an attacker to apply brute force on them.

Recommendations For Rukovoditel version 2.5.2, consider implementing additional security measures to protect user credentials, such as using a secure protocol for cookie transmission and limiting the number of login attempts to prevent brute-force attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.