不具合
There are instances found where password fields have auto-complete enabled. If there are stored credentials, they can be captured by an attacker who gains control over the user's computer. Furthermore, an attacker who finds a separate application vulnerability such as cross-site scripting may be able to exploit this to retrieve a user's browser-stored credentials.
| 不具合 ID 番号 | BUG-000094891 |
|---|---|
| 送信されました | March 14, 2016 |
| 最終更新日 | February 15, 2023 |
| 適用対象 | ArcGIS for Server |
| 見つかったバージョン | 10.2.2 |
| サーバー プラットフォーム | Windows OS |
| クライアント プラットフォーム | 2012 R2 |
| ステータス | Will Not Be Addressed |
参考情報
This issue was logged against a version of the software which is no longer supported, and has not had activity in some time. We apologize that we were unable to address this issue within the current product life cycle. If the issue continues to affect your work in a supported release, please contact Technical Support.対処法
Avoid storing passwords in a browser.再現の手順
不具合 ID: BUG-000094891
ソフトウェア:
- ArcGIS for Server
ArcGIS の専門家からヘルプを受ける
Esri Support アプリのダウンロード
このトピックについてさらに調べる
関連情報の検索
このトピックに関連するトレーニングの検索
アイデアを探して、フィードバックを提供します