CVEvulnerability

CVE-2011-4677

7.5 HIGH Published 2011-12-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-12-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

One Click Orgs before 1.2.3 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Affected configurations

• oneclickorgs one click orgs (<= 1.2.2) • oneclickorgs one click orgs 1.0.0 • oneclickorgs one click orgs 1.0.1 • oneclickorgs one click orgs 1.1.0 • oneclickorgs one click orgs 1.1.1 • oneclickorgs one click orgs 1.2.0 • oneclickorgs one click orgs 1.2.1

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References