Post

Ruijie Rg Uac Account Password Information Leaked Cnvd 2021 14536

Ruijie Rg Uac Account Password Information Leaked Cnvd 2021 14536

Ruijie RG-UAC account password information leaked CNVD-2021-14536

Vulnerability Description

Ruijie RG-UAC unified Internet behavior management audit system has leaked account password information, which can indirectly obtain user account password information and log in to the backend.

Affect Version

Ruijie RG-UAC unified Internet behavior management audit system

Network surveying and mapping

Vulnerability reappears

Come to the login page

img

Press F12 to view the source code, and you can find the md5 form of account and password

img

After decrypting md5, you can log in to the system after getting the password

img

img

##

This post is licensed under CC BY 4.0 by the author.