Uploaded image for project: 'Red Hat Fuse'
  1. Red Hat Fuse
  2. ENTESB-6796

RAW passowrd with special characters in SFTP URI displays part of the password in error logs

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • fuse-7.0
    • jboss-fuse-6.2.1
    • Camel
    • None
    • % %
    • Hide

      Attached sample test application.Need to run as JunitTest.

      Show
      Attached sample test application.Need to run as JunitTest.

    Description

      If we use RAW password in SFTP URI then if because some SFTP failure it throws exception in log and displays SFTP URI in log.Displayed password in log should be encrypted password.

      Existing behaviour :

      If we use RAW password without any special characters then on failure it displays encrypted password in log correctly :
      For Ex :

      sftp://badhost/target?password=RAW(abcdef)&username=jrandom&throwExceptionOnConnectFailed=true&maximumReconnectAttempts=0&autoCreate=false
      

      Output in error log :

      sftp://badhost/target?autoCreate=false&maximumReconnectAttempts=0&password=xxxxxx&throwExceptionOnConnectFailed=true&username=jrandom
      

      If we use RAW password with any special characters then on failure it displays part of password encrypted and remaining part as plain text in log :
      For Ex :

      sftp://badhost/target?password=RAW(abc&def)&username=jrandom&throwExceptionOnConnectFailed=true&maximumReconnectAttempts=0&autoCreate=false
      

      Output in error log :

      sftp://badhost/target?autoCreate=false&maximumReconnectAttempts=0&password=xxxxxx&def&throwExceptionOnConnectFailed=true&username=jrandom
      

      So basically it encrpts password till it encounters any special chracters like "&" then remaining password it displays as plain text.

      IN case of any special characters also expected behaviour is it should display complete password in encrypted format.

      Attachments

        Issue Links

          Activity

            People

              pantinor@redhat.com Paolo Antinori
              skumbhar Swapnil Kumbhar (Inactive)
              Jan Bouska Jan Bouska
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: