Details
-
Type:
Bug
-
Status: Closed (View Workflow)
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 5.5.40, 10.0.14
-
Fix Version/s: 5.5.43
-
Component/s: Plugin - Audit
-
Labels:
-
Environment:Linux
Description
Audit plugin puts the user password in clear text on CREATE USER
This might be a feature request, but as it is a security risk, I filled a bug.
For reference, the mcafee plugin has the following config options:
audit_password_masking_regex
audit_password_masking_cmds
https://github.com/mcafee/mysql-audit/wiki/Configuration