If the createUser command is logged for any reason, it includes the password in plaintext.
runQuery called test.$cmd { createUser: "spencer", pwd: "password", roles: [ "readWrite" ], writeConcern: { w: "majority", wtimeout: 30000.0 } }
- is related to
-
SERVER-12049 Redact password data from profiler/slowms output for user management commands
-
- Closed
-