Description
IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the title of an HTML page.
References
- 20061003 Security flaw in IBM Client Security Password Manager mailing-list
- 1681 third-party-advisory
- 20308 vdb-entry