[Openstack-security] [Bug 1634907] Re: Auth password is being printed to logs in opendaylight client

Jeremy Stanley fungi at yuggoth.org
Fri Oct 21 00:51:30 UTC 2016


No advisory warranted, report class B3 (A vulnerability in experimental
or debugging features not intended for production use) per the OpenStack
VMT taxonomy: https://security.openstack.org/vmt-process.html#incident-
report-taxonomy

** Information type changed from Public Security to Public

** Changed in: ossa
       Status: Incomplete => Won't Fix

** Tags added: security

-- 
You received this bug notification because you are a member of OpenStack
Security, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1634907

Title:
  Auth password is being printed to logs in opendaylight client

Status in Ceilometer:
  Fix Released
Status in OpenStack Security Advisory:
  Won't Fix

Bug description:
  The opendaylight client is printing debug that can potentially contain
  the user password. This should be redacted for security.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ceilometer/+bug/1634907/+subscriptions




More information about the Openstack-security mailing list