{"action":"created","issue":{"url":"https://api.github.com/repos/veyon/veyon/issues/318","repository_url":"https://api.github.com/repos/veyon/veyon","labels_url":"https://api.github.com/repos/veyon/veyon/issues/318/labels{/name}","comments_url":"https://api.github.com/repos/veyon/veyon/issues/318/comments","events_url":"https://api.github.com/repos/veyon/veyon/issues/318/events","html_url":"https://github.com/veyon/veyon/issues/318","id":315736929,"number":318,"title":"LDAP bind password stored as plain text","user":{"login":"ldlx","id":5896642,"avatar_url":"https://avatars1.githubusercontent.com/u/5896642?v=4","gravatar_id":"","url":"https://api.github.com/users/ldlx","html_url":"https://github.com/ldlx","followers_url":"https://api.github.com/users/ldlx/followers","following_url":"https://api.github.com/users/ldlx/following{/other_user}","gists_url":"https://api.github.com/users/ldlx/gists{/gist_id}","starred_url":"https://api.github.com/users/ldlx/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ldlx/subscriptions","organizations_url":"https://api.github.com/users/ldlx/orgs","repos_url":"https://api.github.com/users/ldlx/repos","events_url":"https://api.github.com/users/ldlx/events{/privacy}","received_events_url":"https://api.github.com/users/ldlx/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-04-19T05:55:44Z","updated_at":"2018-04-19T06:05:39Z","closed_at":"2018-04-19T06:05:39Z","author_association":"NONE","body":"I noticed that the LDAP bind password is stored as plain text in the windows registry visible for all users. Please store the password encrypted.\r\nAs a workaround I created a new user account in AD which is not member of any default user group (e. g. domain users) so my LDAP bind account is useless for anything else than querying the AD."},"comment":{"url":"https://api.github.com/repos/veyon/veyon/issues/comments/382620930","html_url":"https://github.com/veyon/veyon/issues/318#issuecomment-382620930","issue_url":"https://api.github.com/repos/veyon/veyon/issues/318","id":382620930,"user":{"login":"tobydox","id":3300739,"avatar_url":"https://avatars0.githubusercontent.com/u/3300739?v=4","gravatar_id":"","url":"https://api.github.com/users/tobydox","html_url":"https://github.com/tobydox","followers_url":"https://api.github.com/users/tobydox/followers","following_url":"https://api.github.com/users/tobydox/following{/other_user}","gists_url":"https://api.github.com/users/tobydox/gists{/gist_id}","starred_url":"https://api.github.com/users/tobydox/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tobydox/subscriptions","organizations_url":"https://api.github.com/users/tobydox/orgs","repos_url":"https://api.github.com/users/tobydox/repos","events_url":"https://api.github.com/users/tobydox/events{/privacy}","received_events_url":"https://api.github.com/users/tobydox/received_events","type":"User","site_admin":false},"created_at":"2018-04-19T06:05:39Z","updated_at":"2018-04-19T06:05:39Z","author_association":"CONTRIBUTOR","body":"In Veyon 4.1 all passwords are encrypted. You can try Veyon 4.1 Alpha for testing. Thanks for the feedback anyways ;-)"}}
{"actor":{"display_login":"tobydox"}}