AutoComplete Attribute Not Disabled for Password in Cisco FMC 1000

[nocitinfra]

During recent Vulnerability assessment we have observed one vulnerability of Autocomplete attribute is not disabled on password fields which is allowing browser to get the password for local user. How we can address this in FMC. As per VA suggestion , they have advised to Add the attribute 'autocomplete=off' to these fields to prevent browsers from caching credentials, but I need more clarity on this part for its feasibility & detailed documentation if any.

[Marvin Rhoads · Accepted solution]

This is not configurable in FMC as far as I know. That includes up to the latest version 7.4.

You can open a TAC case or work with your Cisco account team to report it for consideration as an enhancement (ENH) bug if that helps satisfy your compliance obligation.