chrispopp Posted July 30, 2019 Report Share Posted July 30, 2019 I noticed that in the latest version the SIP/WEBÂ passwords are shown in clear text if someone changes them under the Registration tab. Can this be disabled? Quote Link to comment Share on other sites More sharing options...
Support Posted July 30, 2019 Report Share Posted July 30, 2019 Thank you for bringing this to our attention. This has been escalated now. Quote Link to comment Share on other sites More sharing options...
Vodia PBX Posted July 30, 2019 Report Share Posted July 30, 2019 What version is this? This should be fixed in 63 already. Quote Link to comment Share on other sites More sharing options...
Support Posted July 30, 2019 Report Share Posted July 30, 2019 I see this on 63.0.4. Quote Link to comment Share on other sites More sharing options...
chrispopp Posted July 30, 2019 Author Report Share Posted July 30, 2019 It's also shown under the extension edit. Right in the password field... Quote Link to comment Share on other sites More sharing options...
Vodia PBX Posted July 30, 2019 Report Share Posted July 30, 2019 Maybe there was another area where the message could be generated - we'll add that just to make sure. Will be in the next 63.0 - probably 63.0.5. Quote Link to comment Share on other sites More sharing options...
chrispopp Posted August 1, 2019 Author Report Share Posted August 1, 2019 Jeez... Just testing more settings. Seems that all passwords are shown. Below is provisioning details. Quote Link to comment Share on other sites More sharing options...
Vodia PBX Posted August 2, 2019 Report Share Posted August 2, 2019 There is a setting in the pbx.xml that enabled that (rest_show_passwords, default is false). There are some customers that demand that all passwords are sent to the front end... Quote Link to comment Share on other sites More sharing options...
chrispopp Posted August 6, 2019 Author Report Share Posted August 6, 2019 Thanks for getting back. I did enable that feature because we need to be able to retrieve the passwords in order to automate a provisioning softphone we created. But I didn't think that the same feature would enable it on the web interface... There should still be a way to disable showing passwords in clear text on the web interface. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.