You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@kylin.apache.org by "longfeiJiang (Jira)" <ji...@apache.org> on 2023/04/06 06:07:00 UTC

[jira] [Commented] (KYLIN-5494) API for diag has security issues

    [ https://issues.apache.org/jira/browse/KYLIN-5494?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17709215#comment-17709215 ] 

longfeiJiang commented on KYLIN-5494:
-------------------------------------

*Dev Design*

Modified following APIs:
/kylin/api/system/diag  get ，delete ，post
/kylin/api/system/diag/query 
/kylin/api/system/diag/status

Encrypt the server with Base64, Base64 decryption of the host value of 5 APIs

> API for diag has security issues
> --------------------------------
>
>                 Key: KYLIN-5494
>                 URL: https://issues.apache.org/jira/browse/KYLIN-5494
>             Project: Kylin
>          Issue Type: Bug
>            Reporter: longfeiJiang
>            Assignee: longfeiJiang
>            Priority: Major
>
>  API for diag : (/kylin/api/system/diag?host= ip:port) 
> param ip is clear text



--
This message was sent by Atlassian Jira
(v8.20.10#820010)