Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hashing. Thus, an attacker can easily apply brute force on them.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Rukovoditel 安全漏洞
Vulnerability Description
Rukovoditel是Rukovoditel团队的一套基于Web的开源项目管理软件。该软件具有项目管理、客户关系管理等功能。 Rukovoditel 2.5.2版本中存在安全漏洞，该漏洞源于程序使用URL编码、base64编码和散列算法将用户密码和用户名存储在cookie中。攻击者可利用该漏洞暴力破解用户名和密码。
CVSS Information
N/A
Vulnerability Type
N/A