cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
138
Views
0
Helpful
0
Replies
Highlighted
Beginner

NX-OS : User Password in clear in TACACS+ logs at information level.

Hi,

here is a problem, maybe a bug.

We are on NX-OS 5.2(1)N1(1b)

 

When we activate logging at information level for tacacs events :

logging level tacacs 6

 

And when a tacacs user connects we get his password in clear in the log :

2015 Aug 25 11:02:01.072 SWITCHNAME %TACACS-6-TACACS_ACCOUNTING_MESSAGE: update: : : added user userbob 2BOBpassword!^W ^O

 

Is this a bug ? is there a way to hide passwords ?

 

Tommy

Everyone's tags (1)
Content for Community-Ad