-
Title
A potentially dangerous Request.Form value was detected from the client -
Description
When attempting to log into the Password Manager Helpdesk Site, the user is unable to do so and the following error is seen in the Event Viewer on the Password Manager server:
System.Web.HttpRequestValidationException (0x80004005): A potentially dangerous Request.Form value was detected from the client (Password="USERPASSWORD").
-
Cause
The user password contains a combination of characters, which when submitted to Password Manager is misinterpreted as a potentially dangerous request. The characters causing the issue are known to be the bracket characters < and >.
This issue has been identified as a product defect, and given the defect ID 115992.
-
Resolution
WORKAROUND
Reset the user's password and remove any < or > characters present.
STATUS
Waiting for a fix in a future release of Password Manager.
-
Change Request
115992