CVE-2014-4776

EUVD-2014-4695
IBM License Metric Tool 9 before 9.1.0.2 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 41%
Affected Products (NVD)
VendorProductVersion
ibmlicense_metric_tool
9.0
ibmlicense_metric_tool
9.0.1
ibmlicense_metric_tool
9.1.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg21713641
http://www.securityfocus.com/bid/74437
http://www.securitytracker.com/id/1032256
http://www-01.ibm.com/support/docview.wss?uid=swg21713641
http://www.securityfocus.com/bid/74437
http://www.securitytracker.com/id/1032256