AutoComplete attribute not disabled on login page (QID 86729) - Edge SWG (ProxySG)
Article ID: 442604
Updated On:
Products
ISG Proxy
ProxySG Software - SGOS
Issue/Introduction
PCI compliance scans, such as Qualys, flag QID 86729 on the Edge SWG (ProxySG). The scan indicates the AutoComplete attribute is not disabled for password fields in form-based authentication on the Admin Console login page.
Environment
- Edge SWG (ProxySG)
- SGOS 7.4.14.x, 7.4.15.x
Cause
A bug in SGOS (SG-44082) prevents the login page from explicitly disabling the browser autocomplete feature for sensitive password fields.
Resolution
Fixed in release 7.4.16.1 and higher.
See Download Broadcom products, patches and software for steps to download this release.
Additional Information
Feedback
Yes
No
Powered by
