CVE-2011-4677

One Click Orgs < 1.2.3 - Unauthenticated Credential Theft via Autocomplete

Title source: llm
STIX 2.1

Description

One Click Orgs before 1.2.3 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

References (2)

Core 2
Core References
Various Sources x_refsource_misc
http://dmcdonald.net/?page_id=43

Scores

EPSS 0.0138
EPSS Percentile 68.7%

Details

CWE
CWE-287
Status published
Products (7)
oneclickorgs/one_click_orgs 1.0.0
oneclickorgs/one_click_orgs 1.0.1
oneclickorgs/one_click_orgs 1.1.0
oneclickorgs/one_click_orgs 1.1.1
oneclickorgs/one_click_orgs 1.2.0
oneclickorgs/one_click_orgs 1.2.1
oneclickorgs/one_click_orgs < 1.2.2
Published Dec 06, 2011
Tracked Since Feb 18, 2026