[CLOUDSTACK-8009] A secure password manager

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 4.0.0, 4.1.0, 4.2.0, 4.3.0, 4.4.0, 4.5.0
• Component/s: Virtual Router
• Security Level: Public (Anyone can view this level - this is the default.)
• Labels: management password router secure virtual
• Assignee: Unassigned
• Reporter: Alireza Eskandari
• Created: 03/Dec/14 05:23
• Updated: 03/Dec/14 05:23

Description

Password management service uses plain text for transferring password over network.
In shared networks other instances can sniff traffics on port 8080 and see newly created passwords.