Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-25593

ambari-agent.log output prints password in plain text

Add voteVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Open
    • Priority: Critical
    • Resolution: Unresolved
    • Affects Version/s: 2.7.4
    • Fix Version/s: None
    • Component/s: ambari-agent
    • Labels:
      None

      Description

      The ambari-agent.log would print ambari-related password and in plaintext passwords and all attributes of third-party components such as some sensitive attributes customized in spark, which can easily lead to password leaks

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              echohlne akiyamaneko

              Dates

              • Created:
                Updated:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 10m
                10m

                  Issue deployment