Unscored CVE-2012-0680 EUVD-2012-0712GHSA-hph9-974j-4x64

Apple Safari before 6.0 does not properly handle the autocomplete attribute of a password input element, which allows remote attackers to b…

Published Jul 25, 2012 · Updated Aug 6, 2024 · Assigned by apple

Description

Apple Safari before 6.0 does not properly handle the autocomplete attribute of a password input element, which allows remote attackers to bypass authentication by leveraging an unattended workstation.

References

APPLE-SA-2012-09-19-1 vendor-advisory
http://support.apple.com/kb/HT5503
54688 vdb-entry
APPLE-SA-2012-07-25-1 vendor-advisory
http://support.apple.com/kb/HT5400