How are SMTP passwords stored in ColdFusion Administrator

[MikaelPaul]

When configuring a username and password for an SMTP mail server, I'd like to know where/how the password is stored on the server.

I did find out where the password file is stored for the ColdFusion administrator password: C:\ColdFusion2016\cfusion\lib\password.properties

However this isn't the SMTP server's password that we would enter into the password field under ColdFusion Adminstrator's Server Settings > Mail. Is this stored in the same manner-encrypted-or is is stored in a file in plaintext non-encrypted?

Thanks,

Mikael

[carl type3 · Accepted solution]

Hi Mikael,

Have a look at file \ColdFusion2016\cfusion\lib\neo-mail.xml .

HTH, Carl.

[MikaelPaul]

Thanks Carl, that file does indeed contain the hashed password.