Uploaded image for project: 'Camel'
  1. Camel
  2. CAMEL-14375

camel-kafka - The saslJaasConfig option may contain sensitive information that can be logged

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.0.1, 2.25.0, 3.1.0
    • Component/s: camel-kafka
    • Labels:
      None
    • Estimated Complexity:
      Unknown

      Description

      See SO
      https://stackoverflow.com/questions/57912692/camel-defaultshutdownstrategy-logging-full-url

      We would need to mask this key (add it to existing known keys) if it always contains sensitive details such as username and passwords

        Attachments

          Issue Links

          is fixed by

          Improvement - An improvement or enhancement to an existing feature or task. CAMEL-14379 camel-core - Route lifecycle should not log full endpoint uris

          • Major - Major loss of function.
          • Resolved

            Activity

              People

              • Assignee:
                davsclaus Claus Ibsen
                Reporter:
                davsclaus Claus Ibsen
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: