mysql_clientdb_plugin scrambles password in certain cases

server/plugins-available/mysql_clientdb_plugin.inc.php

method

function process_host_list($action, $database_name, $database_user, $database_password, $host_list, $link, $database_rename_user = '', $user_access_mode = 'rw') {

has the following code, about line 104

$password variable does not exist

$database_password = $app-\>db-\>getPasswordHash($password);

User is beeing created with an unknown password, the regex might be problematic in rare cases, too.