Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-14317

KMSWebServer$deprecateEnv may leak secret

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 3.0.0-alpha2
    • 3.0.0-alpha4
    • kms, security
    • None

    Description

      May print warning message with secret in deprecated env var or matching property:

          LOG.warn("Environment variable {} = '{}' is deprecated and overriding"
                  + " property {} = '{}', please set the property in {} instead.",
              varName, value, propName, propValue, confFile);
      

      Attachments

        1. HADOOP-14317.001.patch
          1 kB
          John Zhuge
        2. HADOOP-14317.002.patch
          2 kB
          John Zhuge

        Issue Links

          Activity

            People

              jzhuge John Zhuge
              jzhuge John Zhuge
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: