Start a Conversation

Unsolved

S

1 Rookie

 • 

5 Posts

8

July 25th, 2024 14:50

When logging into the SRM UI, j_security_check submits a clear text password, which is risky.

When logging into the srm UI interface, I used developer tools to capture the browser's data packets and found that j_security_check submitted a clear text password. This is a risk. Can it be improved in the next version and use encrypted passwords ? thanks!

1 Rookie

 • 

5 Posts

July 25th, 2024 14:54

This risk was discovered from this SRM version:  Dell SRM 5.0.1.0

Moderator

 • 

7K Posts

July 26th, 2024 13:22

Hello sniperht829,

I can put in to see if this can be resolved in a future release.

1 Rookie

 • 

5 Posts

July 27th, 2024 07:24

@DELL-Sam L​ Thank you for your response. I hope to see this security vulnerability fixed in future versions. After all, most enterprises are now paying attention to network security, and such vulnerabilities are easily detected by network security tools. Thank you!

No Events found!

Top