[CAMEL-10869] TRACE on ftp component reveals password

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.18.2
• Fix Version/s: 2.17.6, 2.18.3, 2.19.0
• Component/s: camel-ftp
• Estimated Complexity: Unknown
• Assignee: Claus Ibsen
• Reporter: Mikael Andersson Wigander
• Created: 21/Feb/17 10:45
• Updated: 24/Feb/17 12:47
• Resolved: 24/Feb/17 12:47

Description

When TRACE level is on using a ftp component the password is displayed in plain text.

{{2017-02-21 11:26:28:361 o.a.c.c.f.remote.RemoteFileProducer DEBUG - Not already connected/logged in. Connecting to: ftp://192.168.170.33/mgr/out?allowNullBody=false&consumer.bridgeErrorHandler=true&disconnect=true&password=xxxxxx&pollStrategy=%23defaultPollStrategy&throwExceptionOnConnectFailed=true&username=mgr
2017-02-21 11:26:28:361 o.a.c.c.file.remote.FtpOperations TRACE - Connecting using FTPClient: org.apache.commons.net.ftp.FTPClient@456abb66
2017-02-21 11:26:28:361 o.a.c.c.file.remote.FtpOperations TRACE - Connecting to ftp://mgr@192.168.170.33:21 using connection timeout: 10000
2017-02-21 11:26:28:377 o.a.c.c.file.remote.FtpOperations TRACE - Using SoTimeout=300000
2017-02-21 11:26:28:377 o.a.c.c.file.remote.FtpOperations TRACE - Attempting to login user: mgr using password: gsxr1100
2017-02-21 11:26:28:845 o.a.c.c.file.remote.FtpOperations TRACE - User mgr logged in: true}}