Password is not encrypted issue

[Keertesh]

• Your ABP Framework 7.3.1.
• Your Angular
• Your database provider(EF Core)
• Issue:
• At the time of audit it was observed that username and password are in text format. Cleartext Storage of Sensitive Information vulnerability refers to a security issue where sensitive or confidential data is stored in plain text (i.e., unencrypted) form on a system or network. This means that the data is not protected from unauthorized access, and anyone with access to the system or network can read the information without any encryption or decryption processes.
• Steps needed to reproduce the problem.
• Run the application.
• then Login. @maliming

[sephit]

Where did you see the username and password as plain text? in logs, database (which table)? Can you give us more details please about it?

[Keertesh]

[maliming]

This is not a problem on https

[Keertesh]

okay thanks