[WSS-548] logging secretKey

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 1.6.19, 2.0.6, 2.1.3
• Component/s: WSS4J Core
• Assignee: Colm O hEigeartaigh
• Reporter: Jens Kordowski
• Created: 21/Jul/15 14:57
• Updated: 04/Sep/15 14:32
• Resolved: 29/Jul/15 09:31

Description

Hi,
org.apache.wss4j.dom.message.WSSecEncryptedKey.prepareInternal() logs the secretKey to debug.

Is that intended? I see a risk in doing so.

Best regards
Jens