PT-2011-1349
CVE-2009-5100
·
تاريخ النشر
2011-09-13
·
تاريخ التحديث
2018-10-10
الوصف من
CVSS 2.0
2.1
منخفضةالمقاييسAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Pentaho BI Server versions 1.7.0.1062 and earlier
Description
The issue allows physically proximate attackers to potentially obtain the password because the autocomplete tag is not set to off on web pages that use a password field.
Recommendations
For Pentaho BI Server versions 1.7.0.1062 and earlier, set the autocomplete tag to off on all web pages that contain password fields to prevent potential password exposure.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾