Plain text password in cookies

[nutjob4life]

👮 Describe the Vulnerability

The image below shows us attempting to log into https://edrn-labcas.jpl.nasa.gov/labcas-ui/index.html?version=3.0.0 and the tool showing the request that contains the plaintext user and password. The only steps taken were:

1. Navigating to https://edrn-labcas.jpl.nasa.gov/labcas-ui/index.html?version=3.0.0
2. Entering test credentials
3. Upon pressing the Login button, the request will be sent and shown

[nutjob4life]

@yuliujpl when this is fixed, please let the following know:

• Rojeh Yaghoobi
• Susan Neely
• Mary Rivera
• Robert Solorio

[yuliujpl]

@nutjob4life @hoodriverheather issue resolved in edrn-labcas. Ran a few selenium tests and they worked fine! Hopefully the security tests will return success!

[nutjob4life]

@yuliujpl excelsior! 🎉

Once the folks mention in this comment concur, we can close this issue. What a relief! 😌