Vulnerability in Zohocorp Manageengine Netflow Analyzer
CVE-2015-4418
Zoho NetFlow Analyzer build 10250 and earlier does not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
EPSS: 0.029 (85.3th percentile) — read the EPSS interpretation.
Affected products
- Zohocorp Manageengine_netflow_analyzer
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)