[POTENTIAL SECURITY ISSUE] Password saved in the logs unencrypted

[AlexandreSajus]

I created an Azure VM with a password similar to "&WORD". The VM didn't work so I checked the logs of the VM and I found: "/bin/sh: 1: WORD: not found". Because of the symbol "&", the console thought my password was a command and saved it in the logs UNENCRYPTED.
This could be a really important security issue, please look into it.