Uploaded image for project: 'HPCC'
  1. HPCC
  2. HPCC-21391

ESP logging user's password

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 7.0.0
    • Fix Version/s: 7.0.12
    • Component/s: ESP
    • Labels:
      None

      Description

      In CSoapService::processRequest(), the code queries a pointer to the context userID .  In the call to processHeader, that pointer gets changed to point to the password. If an error occurs, the logging attempts to log the userID, but it now points to the pwd

      "SOAP method <WUQuery> from MyPassword@127.0.0.1."

      Instead of querying a pointer, the code should copy the userid into a StringBuffer

        Attachments

          Activity

            People

            • Assignee:
              russwhitehead Russ Whitehead
              Reporter:
              russwhitehead Russ Whitehead
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: