IIS application pool identity account passwords shown in clear text

后端 未结 2 516
孤独总比滥情好
孤独总比滥情好 2021-02-09 08:58

When I use the appcmd list appool /text:* command, it shows me the application pool identity passwords in clear text. I am able to view

2条回答
  •  囚心锁ツ
    2021-02-09 09:36

    The passwords are only decrypted if you run appcmd as Administrator. If you run as a normal account, you get back the encrypted string.

    This will be something like [enc:IISSomethingProvider:…:enc], just as you find it in applicationHost.config.

提交回复
热议问题