7.5
CVSSv2

CVE-2011-4677

Published: 06/12/2011 Updated: 06/12/2011
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

One Click Orgs prior to 1.2.3 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote malicious users to obtain access by leveraging an unattended workstation.

Vulnerable Product Search on Vulmon Subscribe to Product

oneclickorgs one_click_orgs 1.0.0

oneclickorgs one_click_orgs 1.0.1

oneclickorgs one_click_orgs 1.2.0

oneclickorgs one_click_orgs 1.1.0

oneclickorgs one_click_orgs

oneclickorgs one_click_orgs 1.2.1

oneclickorgs one_click_orgs 1.1.1