[GeoNetwork-users] A password-hardcoded file in GeoNetwork

hi~

I've recently found a password-hardcoded file in the source code of GeoNetwork.

It is "geonetwork\WEB-INF\config.xml" which seems to contain some passwords in it.

Is this a security bug?

Best regards

Tian Lan