EX4 Domain account password stored in plaintext in config.xml

File located in /etc/NAS_CFG/

Info stored under config tags.

Awaiting support call back for other issues that pale in comparison.
Regardless of the use of THIS file such information should be at least encrypted.


Welcome to the WD Community.

Thanks for sharing.

As a recommendation, add this to the ideas board to see if that can be voted and implemented on future updates.

Link to the ideas board:


Done but I think this should be addressed ASAP. Tech support has not called back. http://community.wd.com/t5/Network-Product-Ideas/Encrypt-Hash-or-Remove-Windows-Domain-plaintext-credentials-from/idi-p/860036