Guardian Digital Security Advisory – The Guardian Digital WebTool mistakingly uses a GET method instead of a POST method when passing along a user passphrase for SSH keys being generated allowing for the passphrases to get logged in /var/log/userpass.log along with the rest of the query string.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/31702/ESA-20030924-026
Source: https://packetstormsecurity.com/files/31702/ESA-20030924-026.html