#2679 Testmail during install reveasl passwords

open
nobody
5
2007-12-12
2007-12-12
Eelco
No

During the setup of Compiere 3.0.0. the applications sents a test mail to the support address which includes all sorts of variables filled out in the configuration screen.

Amongst the variables sent is the Oracle system password in plaintext, which passes the network using smtp (plain text as well). This should not happen and I consider this a security issue.

Eelco Maljaars
Stichting ICTU

Discussion


Log in to post a comment.