Sentrigo, a database security software company, has discovered a flaw in Microsoft SQL Server that allows any user with administrative privileges to read the unencrypted password of all other users.

SQL Server - Can't connect to SQL Server after changing SA password ...

Researchers at database security vendor Sentrigo say that in SQL Server 2000 or 2005, administrators can view all of the passwords used since the server went online by reviewing its process memory.

For more information about strong password requirements, see “Database Engine Configuration – Account Provisioning” in Setup Help or in SQL Server 2019 Books Online.

LCPSoft has updated its database password recovery tool series, JRecoverer. The tools use dictionary attack, brute force attack, rainbow tables, or combined ways to quickly recover user account ...

[!INCLUDESQL Server Azure SQL Database Synapse Analytics PDW ] Passwords can be the weakest link in a server security deployment. Take great care when you select a password. A strong password has the ...

To complete the process, the server sends back a list of leaked password hashes that start with those same five characters. 1Password then compares this list locally to see if it contains the full ...