[CLOUDSTACK-6315] Password visible in plan text during volume migration.

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.3.0
• Component/s: Hypervisor Controller, Storage Controller
• Security Level: Public (Anyone can view this level - this is the default.)
• Labels: security
• Environment: Management server CentOS 6.3 x86_64, with Hyperv hypervisor
• Assignee: Anshul Gangwar
• Reporter: Tejas
• Created: 01/Apr/14 08:58
• Updated: 12/Sep/14 09:10
• Resolved: 22/Apr/14 05:57

Description

During volume Migration form one Primary Storage to another, password was visible in plan text.

2014-03-28 17:53:39,059 DEBUG [c.c.h.h.r.HypervDirectConnectResource] (DirectAgent-216:ctx-89b9eb84) POST response is [{"org.apache.cloudstack.storage.command.CopyCmdAnswer":{"result":true,"details":null,"newData":{"org.apache.cloudstack.storage.to.VolumeObjectTO":{"dataStore":{"org.apache.cloudstack.storage.to.PrimaryDataStoreTO":{"uuid":"7890d244-e307-320e-ac42-f90e925b32b8","id":5,"poolType":"SMB","host":"10.129.150.24","path":"/vol_cifs?user=administrator&domain=nw.com","port":445,"url":"SMB://10.129.150.24//vol_cifs?user=administrator&domain=nw.com/?ROLE=Primary&STOREUUID=7890d244-e307-320e-ac42-f90e925b32b8"}},"format":"VHD","name":"ROOT-7","path":"\\10.129.150.24\vol_cifs\ROOT-7.vhd","uuid":"ca572e34-ffa6-4cce-bb24-44c989b4156e","size":10737418240,"primaryDataStore":

{"host":"10.129.150.24","uri":"cifs://10.129.150.24/vol_cifs?user=administrator&domain=nw.com","_role":null,"Path":"\\10.129.150.24/vol_cifs","UncPath":"\\10.129.150.24/vol_cifs","User":"administrator","Password":"C1sco123","Domain":"nw.com","isLocal":false}

,"nfsDataStore":null,"FullFileName":"\\10.129.150.24\vol_cifs\ROOT-7.vhd"}},"contextMap":{}}}]
2014-03-28 17:53:39,060 DEBUG [c.c.h.h.r.HypervDirectConnectResource] (DirectAgent-216:ctx-89b9eb84) executeRequest received response [Lcom.cloud.agent.api.Answer;@31c91ca