[CTAKES-455] Password shown in clear in logs

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 4.0.1
• Assignee: Sean Finan
• Reporter: Alex Zbarcea
• Created: 04/Sep/17 15:53
• Updated: 27/Sep/17 11:30
• Resolved: 26/Sep/17 21:20

Description

When authentication to UMLS fails, the error shows the passwords used.

$ ./bin/runctakesCVD.sh -desc desc/ctakes-clinical-pipeline/desc/analysis_engine/AggregatePlaintextFastUMLSProcessor.xml
(...)
03 Sep 2017 10:35:49 ERROR UmlsUserApprover -   UMLS Account at https://uts-ws.nlm.nih.gov/restful/isValidUMLSUser is not valid for user ###### with ######

Not to log passwords is a security policy enforced in almost all production systems (more here)