Details
-
Type:
Problem report
-
Status: Closed
-
Priority:
Trivial
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: 5.0.3rc1, 5.2.0alpha1, 5.2 (plan)
-
Component/s: API (A)
-
Labels:
-
Team:Team B
-
Sprint:Sprint 66 (Jul 2020)
-
Story Points:0.125
Description
Issue:
Passwords for media are present as clear text in the audit log (UI) as well as the DB table for auditlog_details.
Occurrence:
This appears to occur when an event is triggered and notifications are sent.
Expected:
The expectation is that the passwords are hashed upon entry for configuring media, and if required in the audit log, the hash/or asterisks are presented. No passwords should be in clear text in the audit log.