(CR #434293) Do not use HTTP to connect to the Management Console; the administrative user ID and password are passed in plain-text format during the login process, thus posing a security risk.
Workaround: Use HTTPS to log in to the Management Console. To use HTTPS, first obtain a certificate. If you use the sample (test) certificate that is included with EAServer, anyone with EAServer 6.0 has access to your private (test) key. Therefore, Sybase recommends that you use your own certificate.