Uploaded image for project: 'Cassandra'
  1. Cassandra
  2. CASSANDRA-15278

User's password for sstableloader tool is visible in ps command output.

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Triage Needed
    • Normal
    • Resolution: Unresolved
    • None
    • Tool/bulk load
    • None
    • All
    • None

    Description

      As of now, the password is visible in ps auxww output to any of the system user if the command line utility for sstableloader is used. This seems to be a security flaw. There should be an alternate option to pass the user's password other than as a command line argument.

      Attachments

        Activity

          People

            Unassigned Unassigned
            niketbagwe@gmail.com Niket Vilas Bagwe
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated: