Re:Lenovo Forums stores plaintext password as a cookie
by aendruk on Friday April 22, 2022 @10:54AM
(#31122318)
Did you select “Remember me” in your test?
[ Parent
| on HN ]
Re:Lenovo Forums stores plaintext password as a cookie
by iamdual on Friday April 22, 2022 @07:20PM
(#31129466)
Yes, I found a remember me button on an external login page. There was a base64 encoded cookie but not in plain text. It was JSON string, includes some AES like encryption data, and expiry time.