You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@cloudstack.apache.org by Koushik Das <ko...@citrix.com> on 2012/07/21 08:06:25 UTC

RE: MS UI - addHost call is a GET and the password of the host goes as cleartext

Created CS-15652


-----Original Message-----
From: David Nalley [mailto:david@gnsa.us] 
Sent: Friday, July 20, 2012 10:53 PM
To: cloudstack-users@incubator.apache.org
Subject: Re: MS UI - addHost call is a GET and the password of the host goes as cleartext

On Fri, Jul 20, 2012 at 5:35 AM, Koushik Das <ko...@citrix.com> wrote:
> The request URL may get logged in Tomcat and that may lead to security issues. Any call having such data should be a POST.
>
> Thanks,
> Koushik

Please file a bug for this.

--David