• Do not register here on develop.twiki.org, login with your twiki.org account.
• Use View topic Item7848 for generic doc work for TWiki-6.1.1. Use View topic Item7851 for doc work on extensions that are not part of a release. More... Close
• Anything you create or change in standard webs (Main, TWiki, Sandbox etc) will be automatically reverted on every SVN update.
• Does this site look broken?. Use the LitterTray web for test cases.

Item7113: Configuration log should not contain passwords

Item Form Data

AppliesTo: Component: Priority: CurrentState: WaitingFor: TargetRelease ReleasedIn
Engine Configure Urgent Closed   patch 5.1.4

Edit Form Data

Summary:
Reported By:
Codebase:
Applies To:
Component:
Priority:
Current State:
Waiting For:
Target Release:
Released In:
 

Detail

The configure log (both on-screen and on-disk) contains plaintext passwords for any PASSWORD type item.

This is a very bad thing - and a day 1 bug.

-- TWiki:Main/TimotheLitt - 2013-01-02

Re-opening this:

  • configurationlog.txt entry with *************** had newline missing, e.g was merged with next line.
  • 5.1 branch needs to be patched as well.

-- TWiki:Main.PeterThoeny - 2013-01-02

This is now fixed in trunk and 5.1 branch.

Thanks Timothe for reporting and fixing!

-- TWiki:Main.PeterThoeny - 2013-01-02

I am re-opening this due to a uninitialized value error bug.

-- TWiki:Main.PeterThoeny - 2013-02-08

This is now fixed in trunk and 5.1 branch.

-- TWiki:Main.PeterThoeny - 2013-02-09

ItemTemplate
Summary Configuration log should not contain passwords
ReportedBy TWiki:Main.TimotheLitt
Codebase ~twiki4, 5.1.3, 5.1.2, 5.1.1, 5.1.0, 5.0.2, 5.0.1, 5.0.0, 4.3.2, 4.3.1, 4.3.0, 4.2.4, 4.2.3, 4.2.2, 4.2.1, 4.2.0, 4.1.2, 4.1.1, 4.1.0, 4.0.5, 4.0.4, 4.0.3, 4.0.2, 4.0.1, 4.0.0
SVN Range TWiki-5.1.3-trunk, Sat, 29 Dec 2012, build 24625
AppliesTo Engine
Component Configure
Priority Urgent
CurrentState Closed
WaitingFor

Checkins TWikirev:24627 TWikirev:24685 TWikirev:24686 TWikirev:24915 TWikirev:24916
TargetRelease patch
ReleasedIn 5.1.4
Edit | Attach | Watch | Print version | History: r11 < r10 < r9 < r8 < r7 | Backlinks | Raw View |  Raw edit | More topic actions
Topic revision: r11 - 2013-02-18 - PeterThoeny
 
This site is powered by the TWiki collaboration platform Powered by PerlCopyright © 2008-2023 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback