EX4 Domain account password stored in plaintext in config.xml

My Cloud OS 3 Personal & Network Attached Storage My Cloud EX4
1

File located in /etc/NAS_CFG/

Info stored under config tags.

Awaiting support call back for other issues that pale in comparison.
Regardless of the use of THIS file such information should be at least encrypted.

2

Hi,

Welcome to the WD Community.

Thanks for sharing.

As a recommendation, add this to the ideas board to see if that can be voted and implemented on future updates.

Link to the ideas board:

http://community.wd.com/t5/Network-Product-Ideas/idb-p/network_ideas

3

Done but I think this should be addressed ASAP. Tech support has not called back. http://community.wd.com/t5/Network-Product-Ideas/Encrypt-Hash-or-Remove-Windows-Domain-plaintext-credentials-from/idi-p/860036