Major Description
The server/src/com/cloud/network/element/CloudZonesNetworkElement.java and server/src/com/cloud/network/router/VirtualNetworkApplianceManagerImpl.java files use the PasswordGenerator.rot13() method. This method is using a cipher which provides no effective encryption or obfuscation.
Mitigation:
Remove the PasswordGenerator.rot13() method so that it is never used in the future. Change the usages to use AES-based encryption (possibly with DBEncryptionUtil.encrypt()).