Redact function fails to mask certain sensitive process parameters in ACC log and payloads (including CMDB list)DescriptionThe redact function for ACC does not properly mask process parameters, that contain passwords, in agent logs and CMDB tables. PRB1928743, fixed since 6.1.0 using a regex, does obfuscate 'password' parameters (password=secret, -password secret), but not 'pass' (--pass=value). This affects ACC agent 6.6.4+ and results in sensitive parameter values remaining visible in agent logs and CMDB process parameter data. Steps to Reproduce Run ACC agent version 6.6.4. (current at the time of opening this problem, although affects all earlier versions too)Start a PowerShell session with a fake process parameter containing "--pass=fakepassword" using: Start-Process powershell.exe -ArgumentList '-NoExit','-Command','Start-Sleep 600','--pass=fakepassword'. Set acc.log to DEBUG level.--pass=fakepassword is not redacted in the logs nor the process list in CMDBWorkaroundThis problem is currently under review and targeted to be fixed in a future release. Subscribe to this Known Error article to receive notifications when more information will be available. For a workaround, add the command-log-redaction-regex option to the acc.yml file with the appropriate regex string to mask sensitive information from the logs and payloads. Configuration file options Log Redaction: Use command-log-redaction-regex to automatically mask sensitive information (passwords, user credentials) from logs and payloads.Related Problem: PRB2083751