[
https://issues.apache.org/jira/browse/OFBIZ-1151?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15759118#comment-15759118 ]
Jacques Le Roux commented on OFBIZ-1151:
----------------------------------------
Not sure why I wrote that then, the trunk is never released :) I guess I feared issues we got once on the demo where somehow an attacker was able to take control of the VM. Note that this was 2 VMs ago, the 2nd and the current 3rd generation were never infiltrated, at least that I know.
> Passwords are not salted
> ------------------------
>
> Key: OFBIZ-1151
> URL:
https://issues.apache.org/jira/browse/OFBIZ-1151> Project: OFBiz
> Issue Type: Sub-task
> Components: party
> Affects Versions: Release Branch 4.0, Trunk
> Reporter: Wickersheimer Jeremy
> Assignee: Adam Heath
> Priority: Minor
>
> Password are currently hashed but not seeded which may be a security issue.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
Locked
