It has come to my attention that not only you are able to access new CMDB UI outside of BMC Remedy scope (without first authenticating with RSSO), but you can also access user's login and password in plain text without any trouble by looking up "login" operation and it's headers in the Google Chrome's Network tab. Are there any plans to make this information protected? It is a pretty big security concern, at least for us.
Which version you are using?
Our system is AtriumCore 19.08.