Beware of plain text session password in export of (Get-VIRole).client

[baunbaekeu]

Hi

After connecting to a vCenter, it is simple to get plain text password for the session, if you miss it…

§ ~\D\Roles> Get-vc myvcenter.local –user xyz –password jJDKAdj293r8##¤”43q23qjk

§ ~\D\P\Roles> (Get-VIRole).client.config.password

jJDKAdj293r8##¤”43q23qjk

jJDKAdj293r8##¤”43q23qjk

…

Just remember if you export Role with –force or –depth like:

(Get-VIRole).client | Export-Clixml -Force -Path test.xml

Regards

Je

[LucD]

Thanks for that!
Note that this is not the case if you connect through SSPI, only when using User/Password, Credential or a CredentialStoreItem.