Uploaded image for project: 'Red Hat Fuse'
  1. Red Hat Fuse
  2. ENTESB-10468

[Hawtio] Direct url gives an access to Hawtio without authentication

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Blocker
    • fuse-7.3
    • fuse-7.3
    • Hawtio
    • % %
    • Hide

      1. Open Hawtio;
      2. Type "http://localhost:8181/hawtio/auth" into URL bar (make sure you are logged out);
      3. It will pass you to the Hawtio page;

      Show
      1. Open Hawtio; 2. Type "http://localhost:8181/hawtio/auth" into URL bar (make sure you are logged out); 3. It will pass you to the Hawtio page;

    Description

      The url http://localhost:8181/hawtio/auth allows to get access to Hawtio with limited functionality, of course.

      Other urls like http://localhost:8181/hawtio/osgi, etc. are fixed in ENTESB-7967 and do not allow to get access.

      Attachments

        Issue Links

          is related to

          Bug - A problem that impairs or prevents the functions of the product. ENTESB-7967 Hawtio: direct url passes to the hawtio page without authentication

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          relates to

          Bug - A problem that impairs or prevents the functions of the product. ENTESB-10823 [Hawtio] Direct url gives an access to Hawtio without authentication [7.3.1]

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Closed

          Bug - A problem that impairs or prevents the functions of the product. ENTESB-10798 [Hawtio] Direct url gives an access to Hawtio without authentication

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              jnethert@redhat.com James Netherton
              jsolovjo Juri Solovjov
              Lucia Drozdova Lucia Drozdova
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: