You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@camel.apache.org by "Claus Ibsen (JIRA)" <ji...@apache.org> on 2017/02/21 10:48:44 UTC
[jira] [Commented] (CAMEL-10869) TRACE on ftp component reveals
password
[ https://issues.apache.org/jira/browse/CAMEL-10869?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15875770#comment-15875770 ]
Claus Ibsen commented on CAMEL-10869:
-------------------------------------
That is by design. Any DEBUG or TRACE logging can log such details. So run with INFO in production.
> TRACE on ftp component reveals password
> ---------------------------------------
>
> Key: CAMEL-10869
> URL: https://issues.apache.org/jira/browse/CAMEL-10869
> Project: Camel
> Issue Type: Improvement
> Components: camel-ftp
> Affects Versions: 2.18.2
> Reporter: Mikael Grevsten
> Labels: ftp, trace
>
> When TRACE level is on using a ftp component the password is displayed in plain text.
> {{2017-02-21 11:26:28:361 o.a.c.c.f.remote.RemoteFileProducer DEBUG - Not already connected/logged in. Connecting to: ftp://192.168.170.33/mgr/out?allowNullBody=false&consumer.bridgeErrorHandler=true&disconnect=true&password=xxxxxx&pollStrategy=%23defaultPollStrategy&throwExceptionOnConnectFailed=true&username=mgr
> 2017-02-21 11:26:28:361 o.a.c.c.file.remote.FtpOperations TRACE - Connecting using FTPClient: org.apache.commons.net.ftp.FTPClient@456abb66
> 2017-02-21 11:26:28:361 o.a.c.c.file.remote.FtpOperations TRACE - Connecting to ftp://mgr@192.168.170.33:21 using connection timeout: 10000
> 2017-02-21 11:26:28:377 o.a.c.c.file.remote.FtpOperations TRACE - Using SoTimeout=300000
> 2017-02-21 11:26:28:377 o.a.c.c.file.remote.FtpOperations TRACE - Attempting to login user: mgr using password: gsxr1100
> 2017-02-21 11:26:28:845 o.a.c.c.file.remote.FtpOperations TRACE - User mgr logged in: true}}
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)