You cannot conclude that the password was stored in plain text, but please note that being
not hashed does not exactly mean that the password is being stored in
plain. It's possible that some (reversible) encryption is used, but from a security standpoint it's almost the same as being stored in plain text. If someone gains ilegitimate access to the server's database to obtain the "encrypted" version of the password, they're equally likely to be able to obtain the private keys to decypher it. The only thing you can conclude is that you should
never trust an administrator. —
Simón Apr 1 at 6:34