This annoys me also.

I'd suggest you create a locked down account with access to only WMI and if 
your concerned further move the user/pass into the wmi script.

Jesse

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of mshundal
Sent: Monday, July 21, 2008 12:55 PM
To: [email protected]
Subject: [zenoss-users] alerting reveals windows credentials

Hi there,

I am currently evaluating zenoss using the vm appliance and so far so good 
except for glitches here and there except i think i just found a major security 
risk.

The alerts based on WMI are reporting along with the command the credentials 
used by Zenoss for windows machines. Now I know about utility accounts and all 
but is it really neccessary to reveal any credentials at all in alerts???

I tryed searching the forums but did not see anything along these lines... is 
this new, known, worked on or noone cares for utlity accounts kinda deal?




-------------------- m2f --------------------

Read this topic online here:
http://community.zenoss.com/forums/viewtopic.php?p=22718#22718

-------------------- m2f --------------------



_______________________________________________
zenoss-users mailing list
[email protected]
http://lists.zenoss.org/mailman/listinfo/zenoss-users
_______________________________________________
zenoss-users mailing list
[email protected]
http://lists.zenoss.org/mailman/listinfo/zenoss-users

Reply via email to