[GH-ISSUE #123] User/password is visible during backup #96

New issue

Closed

opened 2026-02-27 08:14:20 +03:00 by kerem · 1 comment

kerem commented

2026-02-27 08:14:20 +03:00

Owner

Originally created by @rogeriobastos on GitHub (Jan 2, 2019).
Original GitHub issue: https://github.com/lucascbeyeler/zmbackup/issues/123

Originally assigned to: @lucascbeyeler on GitHub.

ISSUE TYPE

Bug Report

ENVIRONMENT VERSION

Zmbackup Version: 1.2.1
Zimbra Version: 8.8.10
Linux Distribution & Version: Ubuntu 16.04.4 LTS

SUMMARY

While backup is being performed is possible to see user and password used to do backup.

STEPS TO REPRODUCE

Run a backup
List running process and filter by the HTTP client (in my case wget)

Originally created by @rogeriobastos on GitHub (Jan 2, 2019). Original GitHub issue: https://github.com/lucascbeyeler/zmbackup/issues/123 Originally assigned to: @lucascbeyeler on GitHub. ##### ISSUE TYPE - Bug Report ##### ENVIRONMENT VERSION - Zmbackup Version: 1.2.1 - Zimbra Version: 8.8.10 - Linux Distribution & Version: Ubuntu 16.04.4 LTS ##### SUMMARY While backup is being performed is possible to see user and password used to do backup. ##### STEPS TO REPRODUCE - Run a backup - List running process and filter by the HTTP client (in my case wget)

kerem

2026-02-27 08:14:20 +03:00

closed this issue
added the
Question
label

kerem commented

2026-02-27 08:14:20 +03:00

Author

Owner

@lucascbeyeler commented on GitHub (Dec 8, 2020):

Hi Rogerio,

There is no solution for that and I do not consider this as a security problem. If you can see the password by using grep you already have access inside the host to do whatever you want.

@lucascbeyeler commented on GitHub (Dec 8, 2020): Hi Rogerio, There is no solution for that and I do not consider this as a security problem. If you can see the password by using grep you already have access inside the host to do whatever you want.