[SYNCOPE-1450] Audit: sensitive information not masked by default during update

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.12, 2.1.3
• Fix Version/s: 2.0.13, 2.1.4, 3.0.0-M0
• Component/s: core
• Assignee: Francesco Chicchiriccò
• Reporter: Francesco Chicchiriccò
• Created: 12/Mar/19 12:44
• Updated: 19/Apr/19 06:53
• Resolved: 12/Mar/19 13:18

Description

The DefaultAuditManager does not mask sensitive data (password, security answer) when storing REST payloads as audit entries, during update.