Don H Posted November 5, 2020 Share Posted November 5, 2020 (edited) This morning I booted up and went to login on my unraid page dashboard. The dashboard popped up without verifying any credentials! I closed the browser and reopened it, and then it finally asked for credentials/login. Then I went to my phone browser to verify and the same thing happened. This is obviously very disconcerting. While I don't have access on from outside my network/LAN, it is still a huge security risk if a virus tries to gain access to a PW protected share. Edited November 5, 2020 by Don H Quote Link to comment
ljm42 Posted November 7, 2020 Share Posted November 7, 2020 The session lifetime for the webgui is 7 days, pretty sure it has been set this way ever since form-based authentication was added. This has no bearing on whether a virus can access files over SMB Quote Link to comment
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.