CVE-2011-2155

Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword password form field without disabling the autocomplete feature…

published May 20, 2011

CVSS
—
EPSS
4%
Percentile
90.2
In the wild
Unconfirmed
What it is

Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03913 · 90.2th percentile
Published
2011-05-20T22:00Z
EPSS history
Timeline
  • 20 MAY 22:00Z
    Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword password form field without disabling the autocomplete feature…
    cvelistv5