Welcome to OCS Inventory NG community support, where you can ask questions and receive answers from other members of the community.

Please ask questions only in English or French.

Release 2.12.3 available

The official documentation can be found on https://wiki.ocsinventory-ng.org. Read it before asking your question.

Categories

SNMPv3 Community Strings not hashed in Dashboard

Hey there,
I'm trying to get SNMP to run on the server, but ran into the issue (?), that custom community strings for snmp display the passwords and passphrases in clear text.
Is this a bug or a feature?
If bug, please try and fix, if feature, I will need to disable the feature again.
in OCS Inventory NG server for Unix by (120 points)
Share on
share on gp share on fb share on tw share on li

1 Answer

0 votes

This is almost certainly a bug or design flaw; clear text should not be displayed. With SNMPv3, passphrases must be protected (at least masked or hashed when displayed).

Showing plain text on the dashboard is a security risk.

 Solution:

Hide/mask (****) instead of displaying directly. Save as hash/encrypted.

If not fixed → restrict dashboard access immediately.

=> This should be considered a fix, not a feature. Geometry Dash

ago by (140 points)
 
Powered by Question2Answer
...