CVE-2009-5100

CVE-2009-5100 affects Pentaho BI Server 1.7.0.1062 and earlier, where web pages using a password field do not set autocomplete off. This may enable physically proximate attackers to obtain the password. The issue is described as a failure to disable autocomplete in login/password contexts, with a...