Uploaded image for project: 'Configuration Persistence Service'
  1. Configuration Persistence Service
  2. CPS-1226

Security bug in the logs

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • High
    • Resolution: Done
    • Jakarta Release
    • Kohn Release
    • NCMP
    • None

    Description

      When somebody set the logging level to DEBUG, can see the password of the current user in the logs as a plain text.

       

      Reproduce:

      • set logging level to debug
      • create cm handle on this endpoint: /ncmpInventory/v1/ch

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            lukegleeson Luke Gleeson
            kissand Andras Zoltan Kiss
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: