CVEvulnerability
CVE-2014-4788
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-09-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Affected configurations
• ibm initiate master data service 9.5
• ibm initiate master data service 9.7
• ibm initiate master data service 10.0
• ibm initiate master data service 10.1
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21682450 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95058 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21682450 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95058 exchange.xforce.ibmcloud.com