Project

General

Profile

Actions

Bug #12810

closed

Sanitize SHA-512 user password hashes in ``status.php`` output

Added by Viktor Gurov about 2 years ago. Updated over 1 year ago.

Status:
Resolved
Priority:
Normal
Assignee:
Viktor Gurov
Category:
Backup / Restore
Target version:
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
22.05
Release Notes:
Default
Affected Version:
2.6.0
Affected Architecture:

Description

config-sanitized.xml sample:

<codeclass='xml'>
        <user>
            <scope>user</scope>
            <sha512-hash>$6$28af93d5de170726$Gfo0na/bvs3pheMnTnW97UybrRiHKWvAsUnWPiNW4u3baG1bGKJvW5GFRM.NDXdc1tS4DKZvJNRameBz7HwZc1</sha512-hash>
            <descr></descr>
            <name>testuser</name>
            <expires></expires>
            <dashboardcolumns>2</dashboardcolumns>
            <authorizedkeys>xxxxx</authorizedkeys>
            <ipsecpsk>xxxxx</ipsecpsk>
            <webguicss>pfSense.css</webguicss>
            <uid>2001</uid>
        </user>

Actions

Also available in: Atom PDF