Information Disclosure

salt is vulnerable to information disclosure. The library displays the password of a newly created user in plaintext to the user that just created a new user account...