SSL Password for Xflow is displayed in plain text under the command line in task manager

Products

• CA Service Management - Service Desk Manager

Issue/Introduction

On the server where Xflow is installed, in the Task Manager under Command Line, we can see the password in clear text as below:

 

Environment

Service Desk Manager 17.4

Resolution

The SSL password exposure is restricted to the local machine's task manager and is only visible to logged-in users with administrative privileges. The security risk is minimal as it requires physical or remote access to an already compromised admin account to view the password in the command line arguments.
This will be addressed at the 17.5 General Availability (GA) release level.