Forum Discussion
speedysam_15115
Nimbostratus
NimbostratusAD auth with OTP - browser refresh issue
Hi,
We're trying to implement AD auth with OTP solution using standard APM policy.
Our pentesters found out that it's possible to use browser refresh to retrieve user AD credentials.
Initial reques...
Cody_Green
Employee
EmployeeEvgeny, the issue is that the browser is caching your form input data (which it shouldn't do for password fields). This is not an issue with APM and trying to solve it with complex customizations is probably the wrong way to go.
I not sure what test environment your auditor used but I am not able to reproduce this in IE, Chrome, Firefox or Safari.
