QwikSec

Security Database

CVE

CWE

Training

CVE-2014-4788

Published: Sep 10, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

ibm-imds-cve20144788-autocomplete(95058)

vdb-entry

x_refsource_XF

http://www-01.ibm.com/support/docview.wss?uid=swg21682450

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.