Total vulnerabilities in the database
In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hashing. Thus, an attacker can easily apply brute force on them.
| Software | From | Fixed in |
|---|---|---|
| rukovoditel / rukovoditel | 2.5.2 | 2.5.2.x |