User password can be read in plain text from cwp_api.log
I beleive it may have been put there by the cpanel miration script, example line:
19-03-24 03:21:30 {domain:*main domain*,user:*username*,pass:*password*,email:*email*,inode:0,nproc:40,nofile:100,package:15,shell:null,ip:173.208.244.19,backup:ON,ssl:null}
Isn't having user password stored in plain text in a log file a security issue?
Topic: User password stored in plain text into cwp_api.log (Read 6859 times)
