NetSight
IP …
low2.1

CVE-2009-5100

Pentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages using a password field, which might allow physically proximate a…

Impact

Pentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages using a password field, which might allow physically proximate attackers to obtain the password.

Affected products

VendorProductAffected versions
PentahoBi Server
through 1.7.0.1062
Versions 1.2.0, 1.6.0

Weakness classification

CWE-200

References