View the SNMP community string in on-prem Credentials

[lkeyes]

Hi....looking to disentangle our SMTP credentials as it looks as if we have multiple credentials for the same asset.  Is it possible to recover, or view the community strings for existing credentials....  The checkbox shown below when creating a new credential is not available when I'm viewing existing ones. 

[Obi_1_Cinobi]

Hello there!

The passwords of submitted credentials are always encrypted prior to being added to your database, the same database that also stores scanned and other data. Once submitted, the passwords are no longer visible in plain text in the web console or database itself.

For more information you can refer to this KB article: https://community.lansweeper.com/t5/installation/credential-and-database-security-in-lansweeper/ta-p...

[lkeyes]

Hi..Obi.....  fair enough.   Many thanks for your reply.  Just trying to think this through further... 

Since the knowledgebase article gives the location of the encryption key on the server.... and that key is shown in plain text...  is that not a vulnerabilty....as in fact by the known location and plain text, it is a "public" key?    Does this not represent a vulnerability that is at least as critical as being able to edit/view the community string in an SNMP credential by an authorized administrator? 

[Obi_1_Cinobi]

Hello there!

This encryption key is indeed stored in a file on the Lansweeper server, making it impossible for anyone to decrypt your credentials unless the Lansweeper server itself is already compromised. Additionally, you would need to "find out" how to reverse the encryption.

We would recommend visiting our trust center for more information regarding security and compliance: https://www.lansweeper.com/trust/

Should you still have questions about security and compliance after visiting our trust center, don't hesitate to contact our security team directly, as they are best suited to answer your questions.

Our security team can be contacted via email: security@lansweeper.com