IBM License Metric Tool 9 before 9.1.0.2 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
| Software | From | Fixed in |
|---|---|---|
| ibm / license_metric_tool | 9.1.0.1 | 9.1.0.1.x |
| ibm / license_metric_tool | 9.0 | 9.0.x |
| ibm / license_metric_tool | 9.0.1 | 9.0.1.x |