[checkmk-commits] [tribe29/checkmk] 29e4d9: 13721 SEC Stop returning password hashes over WebAPI

Branch: refs/heads/2.0.0 Home: https://github.com/tribe29/checkmk Commit: 29e4d9f3015b33b91397ee9de51e49f4e2eb3838 https://github.com/tribe29/checkmk/commit/29e4d9f3015b33b91397ee9de51e49f4e… Author: Maximilian Wirtz &lt;maximilian.wirtz(a)tribe29.com&gt; Date: 2022-02-15 (Tue, 15 Feb 2022) Changed paths: A .werks/13721 M cmk/gui/plugins/webapi/webapi.py M cmk/gui/userdb.py Log Message: ----------- 13721 SEC Stop returning password hashes over WebAPI Previous to this Werk the <i>WebAPI</i> returned the password hashes and SessionIds when calling the <i>get_all_users</i> action. If the user was a automation user the password was returned in clear-text. This data should not be returned ever. If you forgot a password you have to reset it. Change-Id: I86f1666ac44c3a194bd334089245a5c3e7c6a06f