----------------------

JR44048 Information Server Web Console Vulnerabilities - Autocomplete has not been 
disabled for password fields

This change prevents saving of passwords in various Information Server Web Console 
screens. However, if passwords had been previously saved in the Browser before 
installation of this patch, these saved passwords and form history must be cleared 
from the browser cache to prevent these from being presented for auto complete 
selection by users of that browser. The Browser saved passwords and forms history 
can be cleared by executing the following steps:

    Clearing form history in FireFox V10.0.7:

    If you want Firefox to forget all of your previous form entries: 

    1. At the top of the Firefox window, click on the 'Firefox' button, select the 'History' menu and select 'Clear Recent History...' 

       For Windows XP: At the top of the Firefox window, click on the 'Tools' menu and select 'Clear Recent History...'  

    2. In the 'Time Range to clear' drop-down, select 'Everything' 

    3. Click the arrow next to 'Details' to display the list of items that can be cleared

    4. You must check at least 'Form & Search History'

    5. Click 'Clear Now'. The dialog box will disappear and your form history will be erased. 

    Clearing stored passwords in FireFox V10.0.7:

    Here is how to delete sites from the saved passwords list: 

    1. At the top of the Firefox window, click on the 'Firefox' button, then select 'Options' 
       For Windows XP: At the top of the Firefox window,  click 'Tools' and then 'Options'

    2. Select the 'Security' Panel

    3. Under the 'Passwords' section, click 'Saved Passwords' 

       Note: It is not necessary to uncheck 'Remember passwords for sites' since this 
change in Information Server will prevent password saving from specific Information 
Server Web Console screens regardless of this browser setting.

    4. Find the site you want to remove on the list. Select it. Click 'Remove'

       Repeat for each site you wish to remove or instead just click Remove All if you 
wish to remove all saved passwords from this browser.

    5. Click 'Close' to close that window

    Clearing form history and stored passwords in IE 6.0:

    Here's how to clear the sensitive data stored by AutoComplete.

    1. Open the Internet Explorer browser
    2. From the Internet Explorer menu, select 'Tools'
    3. Click 'Internet Options'
    4. Click 'Content'
    5. Click 'AutoComplete'
    6. Click 'Clear Forms'
    7. Click 'OK' to the 'Clear all previously saved form entries except passwords' dialog
    8. Click 'Clear Passwords'
    9. Click 'OK' to the 'Clear all previously saved form passwords' dialog
    10.Click 'OK'

    Clearing form history and stored passwords in IE 8.0:

    Here's how to clear the sensitive data stored by AutoComplete.

    1. Open the Internet Explorer browser
    2. From the Internet Explorer menu, select 'Tools'
    3. Click 'Internet Options'
    4. Click 'Content'
    5. Click 'Settings' button under 'AutoComplete'
    6. Click 'Delete AutoComplete history...' button
    7. Check at least 'Form data' and 'Passwords'
    8. Click 'Delete'

----------------------