[HADOOP-17510] Hadoop prints sensitive Cookie information.

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3.0
• Fix Version/s: 3.3.1, 3.4.0, 2.10.2, 3.2.3
• Component/s: security
• Labels: pull-request-available
• Target Version/s: 3.3.0
• Hadoop Flags: Reviewed
• Assignee: Renukaprasad C
• Reporter: Renukaprasad C
• Created: 01/Feb/21 17:59
• Updated: 11/Feb/24 13:44
• Resolved: 24/Feb/21 09:53

Description

org.apache.hadoop.security.authentication.client.AuthenticatedURL.AuthCookieHandler#setAuthCookie - prints cookie information in log. Any sensitive infomation in Cookies will be logged, which needs to be avaided.

LOG.trace("Setting token value to {} ({})", authCookie, oldCookie);

Issue Links

• is duplicated by: HDFS-15805 Hadoop prints sensitive Cookie information.
• links to: GitHub Pull Request #2673