[MDEV-7134] Audit plugin puts the user password in clear text on CREATE USER Created: 2014-11-19  Updated: 2015-02-17  Resolved: 2015-02-17

Status: Closed
Project: MariaDB Server
Component/s: Plugin - Audit
Affects Version/s: 5.5.40, 10.0.14
Fix Version/s: 5.5.43

Type: Bug Priority: Major
Reporter: Stoykov (Inactive) Assignee: Alexey Botchkov
Resolution: Fixed Votes: 0
Labels: audit, auth_plugin
Environment:

Linux


 Description   

Audit plugin puts the user password in clear text on CREATE USER
This might be a feature request, but as it is a security risk, I filled a bug.

For reference, the mcafee plugin has the following config options:
audit_password_masking_regex
audit_password_masking_cmds
https://github.com/mcafee/mysql-audit/wiki/Configuration

 Comments   
Comment by Alexey Botchkov [ 2015-01-21 ]

That problem is fixed in the Audit plugin v1.2.0.

Generated at Thu Feb 08 07:17:16 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.