[Openstack-security] [Bug 1472331] [NEW] Trust id is not hidden in logs

Ekaterina Chernova efedorova at mirantis.com
Tue Jul 7 16:35:33 UTC 2015


Public bug reported:

When murano creates trustes and operates with data, contains it, the
value of trust is not hidden:

 "SystemData": {"TrustId": "d5f1261a5a4f482d9c65a01bd385255b"}},
"token": "*** SANITIZED ***",

Need to use *** like it's done with token

** Affects: murano
     Importance: High
         Status: Confirmed


** Tags: low-hanging-fruit security

** Changed in: murano
    Milestone: 2014.2.3 => liberty-2

** Tags added: security

** Tags added: low-hanging-fruit

-- 
You received this bug notification because you are a member of OpenStack
Security, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1472331

Title:
  Trust id is not hidden in logs

Status in Murano:
  Confirmed

Bug description:
  When murano creates trustes and operates with data, contains it, the
  value of trust is not hidden:

   "SystemData": {"TrustId": "d5f1261a5a4f482d9c65a01bd385255b"}},
  "token": "*** SANITIZED ***",

  Need to use *** like it's done with token

To manage notifications about this bug go to:
https://bugs.launchpad.net/murano/+bug/1472331/+subscriptions




More information about the Openstack-security mailing list