Mattermost 6.0.2 and previous versions fails to sufficiently sanitize user's password in audit logs when user creation fails.
mattermost mattermost