ikiwiki -- cleartext passwords

2008-05-30T00:00:00
ID 90DB9983-2F53-11DD-A0D8-0016D325A0ED
Type freebsd
Reporter FreeBSD
Modified 2008-05-30T00:00:00

Description

The ikiwiki development team reports:

Until version 2.48, ikiwiki stored passwords in cleartext in the userdb. That risks exposing all users' passwords if the file is somehow exposed. To pre-emtively guard against that, current versions of ikiwiki store password hashes (using Eksblowfish).