You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@continuum.apache.org by "Carlos Sanchez (JIRA)" <ji...@codehaus.org> on 2009/07/25 20:37:50 UTC
[jira] Created: (CONTINUUM-2314) Password is printed in logs in
clear text when adding a project fails
Password is printed in logs in clear text when adding a project fails
---------------------------------------------------------------------
Key: CONTINUUM-2314
URL: http://jira.codehaus.org/browse/CONTINUUM-2314
Project: Continuum
Issue Type: Bug
Components: Security
Affects Versions: 1.3.3
Reporter: Carlos Sanchez
Priority: Blocker
I got this in the continuum log, I've changed the parameters to hide the info, but where I say PASSWORDINCLEARTEXT it had my password there
Actually it had a bad password with a typo (that's why I got unauthorized) but it was close enough to the real one
2009-07-24 16:03:54,137 [addMavenTwoProjectBackgroundThread] INFO org.apache.maven.continuum.project.builder.maven.MavenTwoContinuumProjectBuilder - Downloading https://myusername:*****@svn.company.com/repos/pom.xml
2009-07-24 16:03:55,392 [addMavenTwoProjectBackgroundThread] ERROR org.apache.maven.continuum.project.builder.maven.MavenTwoContinuumProjectBuilder - Error
adding project: Unauthorized https://myusername:PASSWORDINCLEARTEXT@svn.company.com/repos/pom.xml
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (CONTINUUM-2314) Password is printed in logs in
clear text when adding a project fails
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/CONTINUUM-2314?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=184887#action_184887 ]
Carlos Sanchez commented on CONTINUUM-2314:
-------------------------------------------
seems so
> Password is printed in logs in clear text when adding a project fails
> ---------------------------------------------------------------------
>
> Key: CONTINUUM-2314
> URL: http://jira.codehaus.org/browse/CONTINUUM-2314
> Project: Continuum
> Issue Type: Bug
> Components: Security
> Affects Versions: 1.3.3
> Reporter: Carlos Sanchez
> Priority: Blocker
> Fix For: 1.3.4
>
>
> I got this in the continuum log, I've changed the parameters to hide the info, but where I say PASSWORDINCLEARTEXT it had my password there
> Actually it had a bad password with a typo (that's why I got unauthorized) but it was close enough to the real one
> 2009-07-24 16:03:54,137 [addMavenTwoProjectBackgroundThread] INFO org.apache.maven.continuum.project.builder.maven.MavenTwoContinuumProjectBuilder - Downloading https://myusername:*****@svn.company.com/repos/pom.xml
> 2009-07-24 16:03:55,392 [addMavenTwoProjectBackgroundThread] ERROR org.apache.maven.continuum.project.builder.maven.MavenTwoContinuumProjectBuilder - Error
> adding project: Unauthorized https://myusername:PASSWORDINCLEARTEXT@svn.company.com/repos/pom.xml
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Assigned: (CONTINUUM-2314) Password is printed in logs in
clear text when adding a project fails
Posted by "Maria Catherine Tan (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/CONTINUUM-2314?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Maria Catherine Tan reassigned CONTINUUM-2314:
----------------------------------------------
Assignee: Maria Catherine Tan
> Password is printed in logs in clear text when adding a project fails
> ---------------------------------------------------------------------
>
> Key: CONTINUUM-2314
> URL: http://jira.codehaus.org/browse/CONTINUUM-2314
> Project: Continuum
> Issue Type: Bug
> Components: Security
> Affects Versions: 1.3.3
> Reporter: Carlos Sanchez
> Assignee: Maria Catherine Tan
> Priority: Blocker
> Fix For: 1.3.4
>
>
> I got this in the continuum log, I've changed the parameters to hide the info, but where I say PASSWORDINCLEARTEXT it had my password there
> Actually it had a bad password with a typo (that's why I got unauthorized) but it was close enough to the real one
> 2009-07-24 16:03:54,137 [addMavenTwoProjectBackgroundThread] INFO org.apache.maven.continuum.project.builder.maven.MavenTwoContinuumProjectBuilder - Downloading https://myusername:*****@svn.company.com/repos/pom.xml
> 2009-07-24 16:03:55,392 [addMavenTwoProjectBackgroundThread] ERROR org.apache.maven.continuum.project.builder.maven.MavenTwoContinuumProjectBuilder - Error
> adding project: Unauthorized https://myusername:PASSWORDINCLEARTEXT@svn.company.com/repos/pom.xml
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Closed: (CONTINUUM-2314) Password is printed in logs in
clear text when adding a project fails
Posted by "Maria Catherine Tan (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/CONTINUUM-2314?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Maria Catherine Tan closed CONTINUUM-2314.
------------------------------------------
Resolution: Fixed
fixed in
r798376 of 1.3.x branch
r798377 of trunk
> Password is printed in logs in clear text when adding a project fails
> ---------------------------------------------------------------------
>
> Key: CONTINUUM-2314
> URL: http://jira.codehaus.org/browse/CONTINUUM-2314
> Project: Continuum
> Issue Type: Bug
> Components: Security
> Affects Versions: 1.3.3
> Reporter: Carlos Sanchez
> Assignee: Maria Catherine Tan
> Priority: Blocker
> Fix For: 1.3.4
>
>
> I got this in the continuum log, I've changed the parameters to hide the info, but where I say PASSWORDINCLEARTEXT it had my password there
> Actually it had a bad password with a typo (that's why I got unauthorized) but it was close enough to the real one
> 2009-07-24 16:03:54,137 [addMavenTwoProjectBackgroundThread] INFO org.apache.maven.continuum.project.builder.maven.MavenTwoContinuumProjectBuilder - Downloading https://myusername:*****@svn.company.com/repos/pom.xml
> 2009-07-24 16:03:55,392 [addMavenTwoProjectBackgroundThread] ERROR org.apache.maven.continuum.project.builder.maven.MavenTwoContinuumProjectBuilder - Error
> adding project: Unauthorized https://myusername:PASSWORDINCLEARTEXT@svn.company.com/repos/pom.xml
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Closed: (CONTINUUM-2314) Password is printed in logs in
clear text when adding a project fails
Posted by "Maria Catherine Tan (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/CONTINUUM-2314?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Maria Catherine Tan closed CONTINUUM-2314.
------------------------------------------
Resolution: Fixed
Fixed in
r800613 of 1.3.x branch
r800615 of trunk
> Password is printed in logs in clear text when adding a project fails
> ---------------------------------------------------------------------
>
> Key: CONTINUUM-2314
> URL: http://jira.codehaus.org/browse/CONTINUUM-2314
> Project: Continuum
> Issue Type: Bug
> Components: Security
> Affects Versions: 1.3.3
> Reporter: Carlos Sanchez
> Assignee: Maria Catherine Tan
> Priority: Blocker
> Fix For: 1.3.4
>
>
> I got this in the continuum log, I've changed the parameters to hide the info, but where I say PASSWORDINCLEARTEXT it had my password there
> Actually it had a bad password with a typo (that's why I got unauthorized) but it was close enough to the real one
> 2009-07-24 16:03:54,137 [addMavenTwoProjectBackgroundThread] INFO org.apache.maven.continuum.project.builder.maven.MavenTwoContinuumProjectBuilder - Downloading https://myusername:*****@svn.company.com/repos/pom.xml
> 2009-07-24 16:03:55,392 [addMavenTwoProjectBackgroundThread] ERROR org.apache.maven.continuum.project.builder.maven.MavenTwoContinuumProjectBuilder - Error
> adding project: Unauthorized https://myusername:PASSWORDINCLEARTEXT@svn.company.com/repos/pom.xml
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Reopened: (CONTINUUM-2314) Password is printed in logs in
clear text when adding a project fails
Posted by "Maria Catherine Tan (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/CONTINUUM-2314?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Maria Catherine Tan reopened CONTINUUM-2314:
--------------------------------------------
Reopening because password is still printed in logs.
> Password is printed in logs in clear text when adding a project fails
> ---------------------------------------------------------------------
>
> Key: CONTINUUM-2314
> URL: http://jira.codehaus.org/browse/CONTINUUM-2314
> Project: Continuum
> Issue Type: Bug
> Components: Security
> Affects Versions: 1.3.3
> Reporter: Carlos Sanchez
> Assignee: Maria Catherine Tan
> Priority: Blocker
> Fix For: 1.3.4
>
>
> I got this in the continuum log, I've changed the parameters to hide the info, but where I say PASSWORDINCLEARTEXT it had my password there
> Actually it had a bad password with a typo (that's why I got unauthorized) but it was close enough to the real one
> 2009-07-24 16:03:54,137 [addMavenTwoProjectBackgroundThread] INFO org.apache.maven.continuum.project.builder.maven.MavenTwoContinuumProjectBuilder - Downloading https://myusername:*****@svn.company.com/repos/pom.xml
> 2009-07-24 16:03:55,392 [addMavenTwoProjectBackgroundThread] ERROR org.apache.maven.continuum.project.builder.maven.MavenTwoContinuumProjectBuilder - Error
> adding project: Unauthorized https://myusername:PASSWORDINCLEARTEXT@svn.company.com/repos/pom.xml
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Updated: (CONTINUUM-2314) Password is printed in logs in
clear text when adding a project fails
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/CONTINUUM-2314?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Carlos Sanchez updated CONTINUUM-2314:
--------------------------------------
Fix Version/s: 1.3.4
> Password is printed in logs in clear text when adding a project fails
> ---------------------------------------------------------------------
>
> Key: CONTINUUM-2314
> URL: http://jira.codehaus.org/browse/CONTINUUM-2314
> Project: Continuum
> Issue Type: Bug
> Components: Security
> Affects Versions: 1.3.3
> Reporter: Carlos Sanchez
> Priority: Blocker
> Fix For: 1.3.4
>
>
> I got this in the continuum log, I've changed the parameters to hide the info, but where I say PASSWORDINCLEARTEXT it had my password there
> Actually it had a bad password with a typo (that's why I got unauthorized) but it was close enough to the real one
> 2009-07-24 16:03:54,137 [addMavenTwoProjectBackgroundThread] INFO org.apache.maven.continuum.project.builder.maven.MavenTwoContinuumProjectBuilder - Downloading https://myusername:*****@svn.company.com/repos/pom.xml
> 2009-07-24 16:03:55,392 [addMavenTwoProjectBackgroundThread] ERROR org.apache.maven.continuum.project.builder.maven.MavenTwoContinuumProjectBuilder - Error
> adding project: Unauthorized https://myusername:PASSWORDINCLEARTEXT@svn.company.com/repos/pom.xml
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (CONTINUUM-2314) Password is printed in logs in
clear text when adding a project fails
Posted by "Brett Porter (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/CONTINUUM-2314?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=184886#action_184886 ]
Brett Porter commented on CONTINUUM-2314:
-----------------------------------------
so it is only shown if it is wrong?
> Password is printed in logs in clear text when adding a project fails
> ---------------------------------------------------------------------
>
> Key: CONTINUUM-2314
> URL: http://jira.codehaus.org/browse/CONTINUUM-2314
> Project: Continuum
> Issue Type: Bug
> Components: Security
> Affects Versions: 1.3.3
> Reporter: Carlos Sanchez
> Priority: Blocker
> Fix For: 1.3.4
>
>
> I got this in the continuum log, I've changed the parameters to hide the info, but where I say PASSWORDINCLEARTEXT it had my password there
> Actually it had a bad password with a typo (that's why I got unauthorized) but it was close enough to the real one
> 2009-07-24 16:03:54,137 [addMavenTwoProjectBackgroundThread] INFO org.apache.maven.continuum.project.builder.maven.MavenTwoContinuumProjectBuilder - Downloading https://myusername:*****@svn.company.com/repos/pom.xml
> 2009-07-24 16:03:55,392 [addMavenTwoProjectBackgroundThread] ERROR org.apache.maven.continuum.project.builder.maven.MavenTwoContinuumProjectBuilder - Error
> adding project: Unauthorized https://myusername:PASSWORDINCLEARTEXT@svn.company.com/repos/pom.xml
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira