Details
Description
While using the puppetlabs/sqlserver module in order to install Microsoft SQL Server, if one of the passwords is incorrect during the running of setup.exe, the error message displayed in the console contains all of the passwords in plaintext.
Reproduction Steps:
- Install and configure a sqlserver instance providing the wrong password for the agent service account with the following manifest:
- sqlserver_instance { 'MSSQLSERVER': features => ['SQL'], source => 'E:/', sql_sysadmin_accounts => ['myuser'], agt_svc_password => 'wrongpassword', }
- Passwords will be disclosed in the pe console error message