Security Advisory
CVE-2012-0680
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Apple Safari before 6.0 does not properly handle the autocomplete attribute of a password input element, which allows remote attackers to bypass authentication by leveraging an unattended workstation.