VULNERABILITY INTELLIGENCE

CVE-2009-5100

CVSS score2.1 NONE
EPSS probability0.41%
CISA KEVNot currently listed
Published2011-09-13
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

Pentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages using a password field, which might allow physically proximate attackers to obtain the password.

Weakness classification

  • nvd@nist.gov: CWE-200

Primary references