Article Number
000011652
Applies To
RSA Access Manager v4.9 SP1 Web Agent for Apache 2.2
RSA On Premise Adaptive Authentication
Webservers supporting JSP pages
Issue
Back Button On Browser Causes Cache Security Issues with RSA Adaptive Authentication
Cause
There were multiple issues resovled involving the back button and the enrollment page information being displayed even when users were logged out. Engineering has added the following to the JSP pages involved.
<% Response.CacheControl = "no-cache"%>
<% Response.AddHeader "Pragma", "no-cache" %>
<% Response.Expires = -1 %>
ct_enroll.jsp
ct_enroll_images.jsp
ct_passcode.jsp
ct_challenges.jsp
Resolution
The pages were changed in hot fix 4.9 SP1 for agents that support JSP pages. Contact RSA Customer Support and request hot fix 4.9.1.09
