Hashed password visible in processlist when using useradd on shell users
The useradd command on creation of shell users is given the sha-256-hashed password via command line. This makes the sha hash visible to process listing tools like ps
.
This issue has been reported to us by RACK911 LABS.