Password in plaintext

[quer0016]

Hello team,

While checking version v1.9.0-Jans and v5.9.0-Flex, I noticed a couple of issues when creating a user or changing a user's password using the TUI:

1. The password is stored in plaintext in the cli_cmd.log file.
2. The modification date is not being recorded.

I’ve attached an image for reference.

[ossdhaval]

@quer0016 Thanks for bringing this up. Since this is a security concern, can you report this by sending an email to security@jans.io.
After your email report, we will remove this discussion from public view. 🙏

[quer0016]

Done

[devrimyatar]

Please see PR #11903