CVE-2020-26515

The CVE-2020-26515 entry concerns Intland codeBeamer ALM 10.x–10.1.SP4, where the remember-me cookie CB_LOGIN stores user credentials and is encrypted with a NULL key due to a bug in the application. This creates an insufficient protection of credentials with potential exposure if the cookie is a...