NetSight
IP …
medium5.0

CVE-2011-2759

The login page of IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not have an off autocom…

Impact

The login page of IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Affected products

VendorProductAffected versions
IbmTivoli Directory Server
Versions 6.2, 6.2.0.0, 6.2.0.1, 6.2.0.2

Weakness classification

CWE-200

References