Do Not Specify Passwords in Command Line

Details

When a command is executed on the command line, for example mysql -u admin – ppassword, the password may be visible in the user’s shell/command history or in the process list.

NOTE : Nessus has not performed this query, and this check is only provided for informational purposes.

Solution

Use -p without password and then enter the password when prompted, use a properly secured .my.cnf file, or store authentication information in encrypted format in .mylogin.cnf.

Supportive Information

The following resource is also helpful.

This control applies to the following type of system Windows.

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles