CVE-2011-2759

The login page of IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2011-07-17

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Tivoli Directory Server (Ibm)

References

• http://www.ibm.com/support/docview.wss?crawler=1&uid=swg1IO14165
• http://www.ibm.com/support/docview.wss?uid=swg1IO14165
• http://www.ibm.com/support/docview.wss?uid=swg24030320
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68585