Skip to content

Script output contains the password itself #18

@dxdlazarev

Description

@dxdlazarev
  1. Script version we use in a Jamf policy: https://github.com/jamf/FileVault2_Scripts/blob/master/reissueKey.sh
  2. If user has {, } symbols in a password or their combination (not 100% sure here, but both of our users affected and my test user pass contained both { (before) and } (after)). For the log bellow password was: {12345<abc{abC,abc}
  3. Both script output in a terminal and a Jamf Policy log have a cleartext password:
    Script result: Prompting dfilevault for their login password. missing close-brace while executing "send {{12345<abc{abC,abc}} send \r log_user 1 expect eof " Successfully Changed FV2 Key button returned:Close

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions