NetSight
IP …
medium5.0

CVE-2012-0680

Apple Safari before 6.0 does not properly handle the autocomplete attribute of a password input element, which allows remote attackers to bypass authentication…

Impact

Apple Safari before 6.0 does not properly handle the autocomplete attribute of a password input element, which allows remote attackers to bypass authentication by leveraging an unattended workstation.

Affected products

VendorProductAffected versions
AppleSafari
through 5.1.7
Versions 1.0, 1.0.0, 1.0.0b1, 1.0.0b2, 1.0.1

Weakness classification

CWE-264

References