Critical! Username and passwords are in plain text in the install logs!
Acronis, listen up this is a critical item!
When using the Backup_Agent_for_Windows_web.exe and specifying a username and password during the install, the credentials are stored in plain text in the "bootstrapper.log" file.
They are in the 3rd line from the bottom. Here is what mine shows:
2020-04-17T14:54:26:710-04:00 command line: 'ENABLE_COMMON_ERRORS="1" ADDLOCAL="MmsMspComponents,ActiveProtection,BackupAndRecoveryAgent,CommandLineTool,TotalProtection,TrayMonitor" HTTP_PROXY_DISABLED="1" CURRENT_LANGUAGE="en" REGISTRATION_ADDRESS="us5-cloud.acronis.com" REGISTRATION_TOKEN="XXXX-XXXX-XXXX-XXXX" REGISTRATION_REQUIRED="1" REBOOT="ReallySuppress" TARGETDIR="C:\Program Files\BackupClient" MMS_SERVICE_USERNAME="MyDomain\MyUsername" MMS_SERVICE_PASSWORD="MyPasswordIsHere"'.
Please let me know that this message has been received and that someone will be addressing this promptly. Thanks!


- Log in to post comments

Hello Brian,
I've passed this topic to the RnD for review, will follow up with an update asap
Thank you!
- Log in to post comments


UPD: the RnD are working on the fix! Internal issue ID for reference ABR-268695.
- Log in to post comments