AutoComplete Attribute Not Disabled - port 2381 for Insight Manager Web Client Web Interface

[RHagen_1]

Hi, running insight mgmt agents v8.1 & 8.2 on ESX 3.5 update 5..

Security scan came up with a "AutoComplete Attribute Not Disabled for Password in Form Based Authentication"

against the hppts port 2381 web interface HP System Management Homepage v2.1.15.210

The Web server allows form based authentication without disabling the AutoComplete feature for the password field.

they claim, "the AutoComplete attribute disabled for the password field in all forms"

at form name="loginForm" method="post" action="/ui/login.do;jsessionid=#######" onsubmit="return submitLoginForm(this)">

[RHagen_1]

Moved to Management Software forums..