PT-2011-5023 · One Click Orgs · One Click Orgs

Darren Mcdonald · Publicado 2011-12-06 · Atualizado 2011-12-06 · CVE-2011-4677

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions One Click Orgs versions prior to 1.2.3

Description The issue makes it easier for remote attackers to obtain access by leveraging an unattended workstation, as the authentication fields lack an off autocomplete attribute.

Recommendations For versions prior to 1.2.3, update to version 1.2.3 or later to include the off autocomplete attribute for authentication fields and mitigate the risk of unauthorized access.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2011-4677

Produtos afetados

One Click Orgs

Referências · 3

• https://groups.google.com/group/oneclickorgs-devspace/msg/26c40a4cc9e127d2?hl=en&dmode=source&output=gplain · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-4677 · Nota de Segurança
• http://dmcdonald.net/?page_id=43 · Nota