Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-16292

Password provided in the vault utility visible in the OS Audit log in linux

    XMLWordPrintable

Details

    • Bug
    • Resolution: Not a Bug
    • Major
    • None
    • None
    • WildFly Preview
    • Hide

      /var/log/audit/audit.log:node=vmc0586 type=EXECVE msg=audit(1649833087.488:195715): argc=20 a0=" /bin/sh" a1="/opt/wildfly-23.0.2.Final/bin/vault.sh" a2="-k" a3="/opt/vxml-ivr/keystore/vault/va ult.jks" a4="-p" a5="AQSbrh" a6="-e" a7="/opt/vxml-ivr/keystore/vault/" a8="-i" a9="50" a10="-s"  a11="12345678" a12="-v" a13="vault" a14="-b" a15="b1" a16="-a" a17="a1" a18="-x" a19="Ericsson@ 12345"

      /var/log/audit/audit.log:node=vmc0586 type=EXECVE msg=audit(1649833087.499:195720): argc=24 a0=" /opt/jdk1.8.0_301/bin/java" a1="-jar" a2="/opt/wildfly-23.0.2.Final/jboss-modules.jar" a3="-mp"  a4="/opt/wildfly-23.0.2.Final/modules" a5="org.jboss.as.vault-tool" a6="-k" a7="/opt/vxml-ivr/ke ystore/vault/vault.jks" a8="-p" a9="AQSbrh" a10="-e" a11="/opt/vxml-ivr/keystore/vault/" a12="-i " a13="50" a14="-s" a15="12345678" a16="-v" a17="vault" a18="-b" a19="b1" a20="-a" a21="a1" a22= "-x" a23="Ericsson@12345"

      /var/log/audit/audit.log:node=vmc0586 type=EXECVE msg=audit(1649833088.296:195723): argc=20 a0=" /bin/sh" a1="/opt/wildfly-23.0.2.Final/bin/vault.sh" a2="-k" a3="/opt/vxml-ivr/keystore/vault/va ult.jks" a4="-p" a5="AQSbrh" a6="-e" a7="/opt/vxml-ivr/keystore/vault/" a8="-i" a9="50" a10="-s"  a11="12345678" a12="-v" a13="vault" a14="-b" a15="b2" a16="-a" a17="a2" a18="-x" a19="Ericsson@ 123456"

      Show
      /var/log/audit/audit.log :node=vmc0586 type=EXECVE msg=audit(1649833087.488:195715): argc=20 a0=" /bin/sh" a1="/opt/wildfly-23.0.2.Final/bin/vault.sh" a2="-k" a3="/opt/vxml-ivr/keystore/vault/va ult.jks" a4="-p" a5="AQSbrh" a6="-e" a7="/opt/vxml-ivr/keystore/vault/" a8="-i" a9="50" a10="-s"  a11="12345678" a12="-v" a13="vault" a14="-b" a15="b1" a16="-a" a17="a1" a18="-x" a19=" Ericsson@ 12345 " /var/log/audit/audit.log:node=vmc0586 type=EXECVE msg=audit(1649833087.499:195720): argc=24 a0=" /opt/jdk1.8.0_301/bin/java" a1="-jar" a2="/opt/wildfly-23.0.2.Final/jboss-modules.jar" a3="-mp"  a4="/opt/wildfly-23.0.2.Final/modules" a5="org.jboss.as.vault-tool" a6="-k" a7="/opt/vxml-ivr/ke ystore/vault/vault.jks" a8="-p" a9="AQSbrh" a10="-e" a11="/opt/vxml-ivr/keystore/vault/" a12="-i " a13="50" a14="-s" a15="12345678" a16="-v" a17="vault" a18="-b" a19="b1" a20="-a" a21="a1" a22= "-x" a23=" Ericsson@12345" /var/log/audit/audit.log:node=vmc0586 type=EXECVE msg=audit(1649833088.296:195723): argc=20 a0=" /bin/sh" a1="/opt/wildfly-23.0.2.Final/bin/vault.sh" a2="-k" a3="/opt/vxml-ivr/keystore/vault/va ult.jks" a4="-p" a5="AQSbrh" a6="-e" a7="/opt/vxml-ivr/keystore/vault/" a8="-i" a9="50" a10="-s"  a11="12345678" a12="-v" a13="vault" a14="-b" a15="b2" a16="-a" a17="a2" a18="-x" a19=" Ericsson@ 123456 "
    • ---
    • ---

    Description

      Password provided in the vault utility visible in the OS Audit log in linux

      Attachments

        Activity

          People

            bstansbe@redhat.com Brian Stansberry
            goyalrockstar Abhishek Goyal (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: