Unsolved
1 Rookie
•
8 Posts
0
53
March 10th, 2025 14:18
When logging into an account through SRM, the password is transmitted in plain text without encryption.
When logging into an account through SRM, the password is transmitted in plain text without encryption. The password can be seen through the browser developer tools. This is a risk vulnerability for bank customers. The bank's IT security department discovered this vulnerability during an inspection. I raised this issue last year, but almost a year has passed and there is still no version solution. I hope it will be resolved as soon as possible. Thank you.
No Events found!