KBI 311154 Issue Addressed: Argent AT Command-Line Tools May Expose Passwords In Log File

Version

Argent Advanced Technology 3.1A-1410-A and earlier

Date

Thursday, 15 Jan 2015

Summary

Argent AT CLI utility ARGENT_LICENSE_CLI.exe can be used to set properties of Licensed Node

See KBI: Argent AT Command-Line Tools

The utility logs exit code and the complete Command Line in the Log file (ARGENT_LICENSE_CLI_LOG.TXT)

If the Command Line is used to set logon/password, the password is logged in plain text

The issue is addressed in Argent AT 3.1A-1501-C

Technical Background

N/A

Resolution

Upgrade to Argent AT 3.1A-1501-C or later

For customer who cannot upgrade immediately, customer should restrict the log file access to only Argent AT product ‘Administrator’ by properly configuring file security