Server audit log contains master password / secure params in plaintext

Assignee

Reporter

Sprint

Description

When user changed the master password, password is logged in plaintext into server-audit.log:

CloverDX Server 5.15.0.6.R.REL


full log file -

Not master password specific - check comment.

Steps to reproduce

None

Attachments

7

Activity

Kamil Kočí March 3, 2023 at 3:14 PM
Edited

New row in audit log

Fixed

Details

Story Points

Priority

QA Testing

UNDECIDED

Components

Environment

FTE/APTe - Linux britannicus

Created June 8, 2022 at 12:41 PM
Updated February 10, 2025 at 3:28 PM
Resolved March 6, 2023 at 11:38 AM