QwikSec

Security Database

CVE

CWE

Training

CVE-2012-4832

Published: Jan 31, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 and InfoSphere Business Glossary 8.1.1 and 8.1.2 does not have an off autocomplete attribute for the password field on the login page, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www-01.ibm.com/support/docview.wss?uid=swg21623501

x_refsource_CONFIRM

ibm-iis-loginpage-password-disclosure(78906)

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.