CVE-2020-11821

In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hashing. Thus, an attacker can easily apply brute force on them...

PT-2014-2264 · Red Hat · Red Hat Conga +1

Name of the Vulnerable Software and Affected Versions: Red Hat Conga affected versions not specified Description: The issue allows attackers to gain privileges by accessing the ac session cookie, which stores the user's username and password in a Base64 encoded string. Recommendations: At the...