in global-configuration database password is not hashed and can be seen easily in network call this could be a security issue .