Jabber Diagnostic shows Admin password

[Rene Mueller]

Hi,

I just found out that if I open Jabber Diagnostics windows (Shift+STRG+D) and access Device Configuration XML, I can see the phonepassword and also the webadmin password in cleartext! Since these file is accessable by any user, I am a bit scared now.

Can someone explain if this is normal, a bug or just a misconfiguration in CUCM? We are using CUCM 11.5 and Jabber 12.1.2.

[silvervoip]

I have the same issue. I will come back to you with an update soon.

looks like we found why that is happening.