IBM i password is not hidden when typed on request by dcmimport command

ThePrez / DCM-tools

Command-line tools for working with Digital Certificate Manager (DCM) on IBM i

Apache License 2.0

22 stars 5 forks source link

IBM i password is not hidden when typed on request by dcmimport command #10

Closed chrjorgensen closed 2 years ago

chrjorgensen commented 3 years ago

As seen in comment in issue #1 when the user types the IBM i password as requested by the dcmimport command, the password is not hidden but shown in clear text.

This is a major security issue.