CVE-2011-4677 One Click Orgs before 1.2.3 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
One Click Orgs before 1.2.3 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oneclickorgs one click orgs | <= 1.2.2 | No fix listed |
| oneclickorgs one click orgs | = 1.0.0 | No fix listed |
| oneclickorgs one click orgs | = 1.0.1 | No fix listed |
| oneclickorgs one click orgs | = 1.1.0 | No fix listed |
| oneclickorgs one click orgs | = 1.1.1 | No fix listed |
| oneclickorgs one click orgs | = 1.2.0 | No fix listed |
| oneclickorgs one click orgs | = 1.2.1 | No fix listed |