Parallels Desktop Send Plain Text Passwords!

Thoughts from the team
By    | November 25, 2009 | Opinion

A quick warning to any of you Parallels Desktop users out there. If you have an account with parallels, you may want to use a different password to your normal every-dayer because Parallels are more than happy to send you a plain text reminder on demand.

Here is the process which lead to my plain text password being sent (we’ve verified this by checking with a second account in the office now, so this isn’t a one off fluke!)

1) I was an old P4 users upgrading to P5.
2) I used the upgrade path link from the UK store. At the checkout phase requested the password from my P4 account.
3) The password reset page displays an error (Shown below)
4) Your plain text password arrives! (Email below)

We’ve contacted Parallels regarding this issue and will update you with any comment they make on the matter.

****************************************************************************
element 5 order number: **REMOVED**
****************************************************************************
This e-mail was generated by a mail handling system. Please do not reply
to the address listed in the “From” field.
Please read the CUSTOMER SERVICE section for answers to your questions.
****************************************************************************

Dear Valued Customer,

Thank you for placing an order with element 5.

We are sending you the data for your customer account at element 5 as per
your request.

User name: ****@www.stormconsultancy.co.uk
Password: **!!REMOVED!!**

Please use your user ID and password for future orders as well.
https://ccc.element5.com/ccc/my_account.html?languageid=1&pid=**REMOVED**

****************************************************************************
CUSTOMER SERVICE

Questions about your order, payment, or delivery?

Answers to the most frequently asked questions / Contact:
http://ccc.element5.com/ccc/?languageid=1&pid=**REMOVED**

Your order data:
https://ccc.element5.com/ccc/my_account.html?languageid=1&pid=**REMOVED**

****************************************************************************

General terms and conditions of business:
http://esd.element5.com/termsconditions.html?p=**REMOVED**

Best regards,
Your element 5 team
_____________________________________________________________________

element 5 – a service of digital river – www.element5.com
Digital River GmbH
Vogelsanger Str. 78, D-50823 Cologne, Germany
CEO: John Strosahl
Corporate Headquarters: Cologne / HRB 56188 / Cologne Local Court
_____________________________________________________________________

screenshot

More like this