[HDFS-15805] Hadoop prints sensitive Cookie information.

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 3.1.1
• Target Version/s: 3.1.1, 3.3.0
• Assignee: Renukaprasad C
• Reporter: Renukaprasad C
• Created: 30/Jan/21 11:13
• Updated: 05/Feb/21 09:16
• Resolved: 04/Feb/21 05:23

Description

org.apache.hadoop.security.authentication.client.AuthenticatedURL.AuthCookieHandler#setAuthCookie - prints cookie information in log. Any sensitive infomation in Cookies will be logged, which needs to be avaided.

LOG.trace("Setting token value to {} ({})", authCookie, oldCookie);

Issue Links

• duplicates: HADOOP-17510 Hadoop prints sensitive Cookie information.