CVE-2021-27935

creationtimestamp| type| source ---|---|--- 2021-03-03 22:45:39+00:00| seen| https://t.me/cibsecurity/24425...

CVE-2021-27935

Affected software: AdGuard prior to 0.105.2. The issue is that the password hash is stored in the user cookie, enabling an attacker who can obtain a user cookie to offline-brute-force the password. This is a server-side authentication-credential exposure via cookies. Impact stated: offline passwo...