Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-35507

ed25519 authentication plugin create user statement trigger plain text password in audit log

    XMLWordPrintable

Details

    Description

      for version 10.6.19-15-MariaDB-enterprise while creating user using ed255191 authentication, plain text password writing to audit file.

      Create user statement:
      MariaDB [(none)]> create user ed255191@'%' IDENTIFIED VIA ed25519 USING PASSWORD('Bnfjusdjg@123');
      Query OK, 0 rows affected (0.031 sec)

      Audit log entry:
      20241011 01:24:06,rocky1,root,localhost,4,25,QUERY,,'create user ed255191@\'%\' IDENTIFIED VIA ed25519 USING PASSWORD(\'Bnfjusdjg@123\')',0

      Attachments

        Activity

          People

            sanja Oleksandr Byelkin
            vigneswara.bandi Venkata Vigneswara Reddy Bandi
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.