History | Log In     View a printable version of the current page.  
Issue Details (XML | Word | Printable)

Key: QB-2772
Type: Bug Bug
Status: Resolved Resolved
Resolution: Fixed
Priority: Major Major
Assignee: Unassigned
Reporter: J. Mash
Votes: 0
Watchers: 1
Operations

If you were logged in you would be able to see more operations.
QuickBuild

Perforce Password Masking in Command Logging

Created: 04/Aug/16 06:37 AM   Updated: 06/Aug/16 02:35 AM
Component/s: None
Affects Version/s: None
Fix Version/s: 6.1.21

Original Estimate: Unknown Remaining Estimate: Unknown Time Spent: Unknown


 Description  « Hide
Greetings,

I was reviewing some logs earlier and noticed some inconsistencies in the logging output -- Particularly alarming was the plain-text "password" value in one of the commands:

    23:24:00,832 DEBUG - Executing command: p4 -p cgp4-sd.corp.intuit.net:3439 -u jmash -P ****** -c tke.corp.intuit.net-TPS-Main revert -w //...
    23:24:00,999 DEBUG - Executing command: sh -c "p4 -p cgp4-sd.corp.intuit.net:3439 -u jmash -P <password> -c tke.corp.intuit.net-TPS-Main clean "

The second line should probably be something closer to this:

    23:24:00,999 DEBUG - Executing command: p4 -p cgp4-sd.corp.intuit.net:3439 -u jmash -P ****** -c tke.corp.intuit.net-TPS-Main clean

Thanks,
-J. Mash

 All   Comments   Work Log   Change History      Sort Order:
There are no comments yet on this issue.