ID: 13720
Title: Stop returning password hashes over API
Component: REST API
Level: 1
Class: Security fix
Version: 2.1.0i1
Previous to this Werk the <i>REST API</i> returned the password hashes when
getting a user object. If the user was a automation user the password was returned in
clear-text.
This data should not be returned ever. If you forgot a password you have to reset it.
Show replies by date