Unscored CVE-2015-4418 EUVD-2015-4438GHSA-hhp4-hvm2-m2w3

Zoho NetFlow Analyzer build 10250 and earlier does not have an off autocomplete attribute for a password field, which makes it easier for r…

Published Jun 9, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

Zoho NetFlow Analyzer build 10250 and earlier does not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

References

1032516 vdb-entry
75068 vdb-entry
https://support.zoho.com/portal/manageengine/helpcenter/articles/vulnerability-fix-for-fails-to-restrict-access-permissions-cross-site-scripting-cross-site-request-forgery-over-build-10250