VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 31, 2013· Updated Apr 29, 2026

CVE-2012-4832

CVE-2012-4832

Description

Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 and InfoSphere Business Glossary 8.1.1 and 8.1.2 does not have an off autocomplete attribute for the password field on the login page, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Affected products

7
  • IBM/Infosphere Business Glossary2 versions
    cpe:2.3:a:ibm:infosphere_business_glossary:8.1.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:infosphere_business_glossary:8.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_business_glossary:8.1.2:*:*:*:*:*:*:*
  • IBM/Infosphere Information Server5 versions
    cpe:2.3:a:ibm:infosphere_information_server:8.1:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:infosphere_information_server:8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_information_server:8.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_information_server:8.5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_information_server:8.5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.