laptop and a wrench

漏洞

When accessing the Portal for ArcGIS Home page through the ArcGIS Web Adaptor, and logging in to the site using a built-in account, a HTTP request is sent through when HTTPS-only connections are enabled in the portal. The URL passed through is of a page that does not seem to exist, and even though the page does not exist, users are still able to retrieve the username and password since the communication is not encrypted.

上次发布: February 12, 2016 Portal for ArcGIS
漏洞 ID 编号 BUG-000093941
已提交February 2, 2016
上次修改时间June 5, 2024
适用范围Portal for ArcGIS
找到的版本N/A
操作系统N/A
修正版本10.4.1
状态Fixed

重现步骤

漏洞 ID: BUG-000093941

软件:

  • Portal for ArcGIS

当漏洞状态发生变化时获得通知

下载 Esri 支持应用程序

发现关于本主题的更多内容

获取来自 ArcGIS 专家的帮助

联系技术支持部门

下载 Esri 支持应用程序

转至下载选项