/build/static/layout/Breadcrumb_cap_w.png

Clear Text User Password in kbots_cache files

Hi,

One of our Kbox user notifies me that 'Clear Text Password' information is present in XML files located under C:\ProgramData\Dell\KACE\kbots_cache.

I have also checked this and found that Password we are using to access the replication share is present here.

Let me know if i am missing some configuration , or how to remediate this problem.


<?xml version="1.0" encoding="UTF-8"?>
-<kbots xmlns="http://kace.com/Kbots.xsd"> -<kbot> -<config description="" version="1327572146r181" id="327" type="policy" name="Pass reset Administrator disable"> -<dependencies> <dependency name="/packages/kbots/327/resetpass1.vbs" download_url="" alt_location="smb://172.24.2.10;admin:abcd1234@172.24.2.10/kbox/repl2/kbots/327/resetpass1.vbs" checksum="2f212cf12c2d16e289946939619c0911"/> </dependencies> <execute logged_off="true" disconnected="false"> </execute> </config> -<compliance>


Regards,

Afzal Yousufi

0 Comments   [ + ] Show comments

Answers (2)

Posted by: KevinG 12 years ago
Red Belt
0
What exact version of the client?
Posted by: afzal 12 years ago
Fourth Degree Green Belt
0
Version 5.3, before that version i have not checked this informaiton so no idea if it was there in old versions.
Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ