Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jmw9-vfhh-r5g4

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autocomplete attribute for the password (aka j_password) field on the secsphLogin.jsp login page, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autocomplete attribute for the password (aka j_password) field on the secsphLogin.jsp login page, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

EPSS

Процентиль: 87%
0.03489
Низкий

Связанные уязвимости

nvd
больше 12 лет назад

The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autocomplete attribute for the password (aka j_password) field on the secsphLogin.jsp login page, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

EPSS

Процентиль: 87%
0.03489
Низкий