[RANGER-1618] PasswordUtil is not thread-safe

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: master
• Fix Version/s: 1.0.0, 0.7.1
• Component/s: plugins
• Labels: concurrency security thread-safety
• Flags: Patch
• Assignee: Zsombor Gegesy
• Reporter: Zsombor Gegesy
• Created: 26/May/17 10:06
• Updated: 09/Sep/17 03:07
• Resolved: 26/May/17 20:03

Description

As the PasswordUtil has a couple of static variables, which is modified during the encryptPassword/decyptPassword calls - there is a possibility that concurrent calls overwrites the values, resulting in a hard to debug errors.
And it would be nice to add a couple of tests for this utility.