-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Description
Nextcloud version 32 returns sensitive data in clear text when using the occ config:list command:
php /var/www/nextcloud/occ config:list
{
"system": {
"passwordsalt": "***REMOVED SENSITIVE VALUE***",
"secret": "***REMOVED SENSITIVE VALUE***",
"trusted_domains": [
"localhost"
],
"datadirectory": "***REMOVED SENSITIVE VALUE***",
"dbtype": "pgsql",
"version": "32.0.1.2",
"overwrite.cli.url": "http:\/\/localhost",
"dbname": "***REMOVED SENSITIVE VALUE***",
"dbhost": "***REMOVED SENSITIVE VALUE***",
"dbtableprefix": "oc_",
"dbuser": "***REMOVED SENSITIVE VALUE***",
"dbpassword": "***REMOVED SENSITIVE VALUE***",
"instanceid": "***REMOVED SENSITIVE VALUE***",
----> "admin_user": "admintest",
----> "admin_password": "thisisapassword",
[...]
},
Lets open an issue in the nextcloud/server project.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels