5 matches found
CVE-2014-4450: Undefined Security Weakness
The QuickType feature in the Keyboards subsystem in Apple iOS before 8.1 collects typing-prediction data from fields with an off autocomplete attribute, which makes it easier for attackers to discover credentials by reading credential values within unintended DOM input elements...
Design/Logic Flaw
IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended...
CVE-2013-4025: Undefined Security Weakness
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain...
CVE-2011-4677
Vulnerability : CVE-2011-4677 affects One Click Orgs prior to 1.2.3. Root cause : authentication fields lack the off autocomplete attribute, enabling credential exposure on unattended workstations. Impact : supports easier access by remote attackers as described in sources; exact exploit details,...
PT-2011-5023
Name of the Vulnerable Software and Affected Versions One Click Orgs versions prior to 1.2.3 Description The issue makes it easier for remote attackers to obtain access by leveraging an unattended workstation, as the authentication fields lack an off autocomplete attribute. Recommendations For...