I am working on web application security auditing. I was going through various checklists & methodology.
I found one interesting stuff in a document.
Type - Configuration Management Security Testing - After logout, I created a dump file of my chrome browser and opened it in winhex editor. Used search feature of that tool and inserted "pass =" in order to find password. I found username and password shown in hex with that tool.
My question - Is it a vulnerability of an application?
I was also seeking for a solution. I thought if a developer could reset the variable after immediate login, it can eliminate this vulnerability. Am I right ?