CVE-2014-2586

CVE-2014-2586 describes a Cross-site scripting (XSS) vulnerability in the login audit form of McAfee Cloud Single Sign On (SSO) . The flaw allows a remote attacker to inject arbitrary web script or HTML via a crafted password. Some sources imply the impact could include access to sensitive user i...