Closed maverickvn360 closed 4 years ago
Thanks for the report!
Could you explain a bit more? What leak do you mean? There is no default admin password. When you install the application with setup script you choose you admin username and password.
Leak in the sense: default creds are stored in scripts/ulogger.sqlite file. That's y I just wanted to confirm if there's an automated mechanism to change password upon installation..
If you mean this line it is commented out. So it will never be executed in this script.
Apologies for taking your time.. Thanks, I just blindly reported it out..
Not a problem. Thanks anyway for reporting!
Please note: I found this leak via a web scanner. Is there an automated way to update the default password for admin? Or force update? As the credentials present in the sqlite file are leaked. There's a recommended way to set it up via env..
Thanks a lot for your time :)