2.1
CVE-2014-4776
- EPSS 0.69%
- Veröffentlicht 20.05.2015 10:59:00
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
LoginIBM License Metric Tool 9 before 9.1.0.2 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ License Metric Tool Version 9.0
Ibm ≫ License Metric Tool Version 9.0.1
Ibm ≫ License Metric Tool Version 9.1.0.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.69% | 0.479 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://www-01.ibm.com/support/docview.wss?uid=swg21713641
http://www.securityfocus.com/bid/74437
http://www.securitytracker.com/id/1032256