We have a stack of 2 WS-C3850-48T running NX-OS 03.02.01.SE. The running configuration or the switch is backed up nightly by cattools. On the 2/01/14 cattools indicated that the running-config has changed and under vty line 0 4 the command "Password cisco" appeared. On the backup of the 3/01/14 this line of config was then shown as removed. A show run on the switch indicates the last config change was on the 11/12/13 by me so nobody has logged into the switch and changed anything.
Running config on the 02/01/13:
line vty 0 4
exec-timeout 180 0
password cisco
authorization commands 15 vty
authorization exec vty
transport input ssh
line vty 5 15
transport input ssh
Running config on the 03/01/13:
line vty 0 4
exec-timeout 180 0
authorization commands 15 vty
authorization exec vty
transport input ssh
line vty 5 15
transport input ssh
I checked the bug toolkit and couldn't find anything. Does anybody have any ideas why this may have happened?