Please contact support and ask for hotfix 34531
Details as follows:
We need two value formats. One for the <Global> section and one for the <Editors> section.
That doesn't mask "4", but (for example) ";".
This ValueFormat has to be used for a parameter which is used for the database connection in order to create the sync project.
That's behaves the same as the old "ConnectionParameterValue" (which still exists).
That means also a "$" is masked.
This ValueFormat has to be used for a parameter which is used for the OneIM connection in the sync project.
Additionally we have provided a function that a parameter can inherit the value from another parameter.
With that function it's not necessary to pass the same password 2 times in the SynchronizationEditor.CLI.exe (as shown in the provided workaround).