Fixes #35946 - windows pass-crypt modifies input

theforeman · Jan 17, 2023 · 22a9408 · 22a9408
1 parent 80c89d7
commit 22a9408
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/services/password_crypt.rb b/app/services/password_crypt.rb
@@ -19,7 +19,7 @@ def self.passw_crypt(passwd, hash_alg = 'SHA256')
     when 'Base64'
       result = Base64.strict_encode64(passwd)
     when 'Base64-Windows'
-      result = Base64.strict_encode64(passwd.concat("AdministratorPassword").encode('utf-16le'))
+      result = Base64.strict_encode64("#{passwd}AdministratorPassword".encode('utf-16le'))
     else
       result = passwd.crypt("#{ALGORITHMS[hash_alg]}#{generate_linux_salt}")
     end