Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Minor Orion Security No-No

I stumbled upon a security auditors wet dream today when running through the event viewer of my Orion server. It seems the Orion database username & password is written in plain text in the event viewer.

Nothing to get your panties in a twist over but in my opinion this behavior should be modified in future versions of Orion.

This screenshot has been modified for obvious reasons.

Password.jpg

Find more posts tagged with

Accepted answers

All comments

FormerMember

sweet... how can I get a black password?

justinh

Strange. I was just looking at some events today, and the password was starred out.

aLTeReGo

sweet... how can I get a black password?

mspaint.exe

sedmo

Looks like events written to the Windows Application log show the passwords but the same events written to the Solarwinds.Net log have the passwords blanked out with asterisks.