VULNERABILITY INTELLIGENCE

CVE-2012-0680

CVSS score5 MEDIUM

EPSS probability2.03%

CISA KEVNot currently listed

Published2012-07-25

Last modified2026-06-16

Description

Apple Safari before 6.0 does not properly handle the autocomplete attribute of a password input element, which allows remote attackers to bypass authentication by leveraging an unattended workstation.