[
https://issues.apache.org/jira/browse/CASSANDRA-13763?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
C. Scott Andreas resolved CASSANDRA-13763.
------------------------------------------
Resolution: Not A Problem
> Trivial but potential security issue?
> --------------------------------------
>
> Key: CASSANDRA-13763
> URL: https://issues.apache.org/jira/browse/CASSANDRA-13763
> Project: Cassandra
> Issue Type: Bug
> Components: Legacy/Tools
> Reporter: JC
> Priority: Trivial
>
> Hi
> In a recent github mirror, I've found the following line.
> Path: tools/stress/src/org/apache/cassandra/stress/settings/SettingsMode.java
> {code:java}
> 177 out.printf(" Password: %s%n",
> (password==null?password:"*suppressed *"));
> {code}
> As the original password is intended to be masked as "*suppressed *", I was
> wondering if showing "null" when the password is null is safe. This might not
> be an issue but I wanted to report just in case. Thanks!
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
