ProLiant Servers (ML,DL,SL)
cancel
Showing results for 
Search instead for 
Did you mean: 

AutoComplete Attribute Not Disabled - port 2381 for Insight Manager Web Client Web Interface

RHagen_1
Advisor

AutoComplete Attribute Not Disabled - port 2381 for Insight Manager Web Client Web Interface

Hi, running insight mgmt agents v8.1 & 8.2 on ESX 3.5 update 5..

Security scan came up with a "AutoComplete Attribute Not Disabled for Password in Form Based Authentication"

against the hppts port 2381 web interface HP System Management Homepage v2.1.15.210

The Web server allows form based authentication without disabling the AutoComplete feature for the password field.

they claim, "the AutoComplete attribute disabled for the password field in all forms"

at form name="loginForm" method="post" action="/ui/login.do;jsessionid=#######" onsubmit="return submitLoginForm(this)">

1 REPLY
RHagen_1
Advisor

Re: AutoComplete Attribute Not Disabled - port 2381 for Insight Manager Web Client Web Interface

Moved to Management Software forums..