Microsoft.Mashup.Container.NetFX45.exe process is using clear text password of user

[274188A]

Our Cyber Security team alerted me that the PBI Desktop uses a process called :

C:\Program Files\Microsoft Power BI Desktop\bin\Microsoft.Mashup.Container.NetFX45.exe

The process has been detected using the password of the currently logged in user in CLEAR TEXT.
Just raising it with the team for their attention.

[274188A]

So youre saying it all good 'because we know what it is' - where I am saying 'this is so bad to be passing around pwds in plain text'. 

Dos that make sense?

[tharunkumarRTK · Accepted solution]

https://learn.microsoft.com/en-us/data-integration/gateway/service-gateway-onprem-indepth

As you can see in the above image, The datasource credentails are encrypted and will be decrypted while connecting to the on prem datasource. If your internal cyber security team identifies any risk in it then I would suggest you to riase with the Microsoft support team.

If the post helps please give a thumbs up

If it solves your issue, please accept it as the solution to help the other members find it more quickly.

Tharun

[tharunkumarRTK]

@274188A 

I believe you have installed On premises data gateway in your machine and configured semantic model (power BI dataset) refreshes which are connected to on prem data sources. When ever the refresh runs it runs few mashup containers in the machine where the gateway is installed. 

If you want to check the user name with which this particular service is running then you can open services in your windows machine and check the user name against 'On Premises data gateway'

P.S. Refreshes running in the Power BI desktop can also invoke mashup container processes.

If the post helps please give a thumbs up

If it solves your issue, please accept it as the solution to help the other members find it more quickly.

Tharun