[SOLR-13463] Solr admin user credentials defined with -Dbasicauth property during start is visible in admin UI to any user.

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Workaround
• Affects Version/s: 7.7.1
• Component/s: Admin UI
• Labels: admin-interface credentials

Environment

QA

• Assignee: Unassigned
• Reporter: Vinodh
• Created: 10/May/19 13:19
• Updated: 08/Jun/19 14:58
• Resolved: 15/May/19 20:26

Description

We have configured Solr basic authentication in our environment and used Dbasicauth property to define username:password. Since these property will be added to Solr startup, the Solr admin username & password details defined with -Dbasicauth property are displayed in plain text format to all users who are able to login into admin UI interface in JVM & Java properties sections. So even a read user who has privileges to login admin UI can able to see admin user username & password details.