PT-2011-5023 · One Click Orgs · One Click Orgs

Darren Mcdonald · Published 2011-12-06 · Updated 2011-12-06 · CVE-2011-4677

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions One Click Orgs versions prior to 1.2.3

Description The issue makes it easier for remote attackers to obtain access by leveraging an unattended workstation, as the authentication fields lack an off autocomplete attribute.

Recommendations For versions prior to 1.2.3, update to version 1.2.3 or later to include the off autocomplete attribute for authentication fields and mitigate the risk of unauthorized access.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2011-4677

Affected Products

One Click Orgs

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-4677 · Security Note
• https://groups.google.com/group/oneclickorgs-devspace/msg/26c40a4cc9e127d2?hl=en&dmode=source&output=gplain · Note
• http://dmcdonald.net/?page_id=43 · Note