[KARAF-7256] Action logs could leak passwords if passed as argument or option

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 4.3.2
• Component/s: karaf
• Target Version/s: 4.5.0, 4.4.8
• Assignee: Jean-Baptiste Onofré
• Reporter: J. Brébec
• Created: 17/Sep/21 07:06
• Updated: 05/Nov/24 12:57

Description

If a shell Action take a sensible argument like a password, this password will be visible every time the Action log something.

The statement is used to set the name of the thread, without obfuscating any arguments or options. The thread name is logged with the default log4j configuration.

felix-dev/Pipe.java at 3e5671ae7e5107f4f849ef9d5f0a89b1ba9d7439 · apache/felix-dev · GitHub

 

Using the "censor" property in @Argument or @Option doesn't change anything.