ambari-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Shantanu Mundkur (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (AMBARI-15496) /var/lib/ambari-agent/cache/cluster_configuration/configurations.json file contains various passwords in plain text in world readable file
Date Tue, 22 Mar 2016 00:13:25 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-15496?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Shantanu Mundkur updated AMBARI-15496:
--------------------------------------
    Attachment: AMBARI-15496.patch

> /var/lib/ambari-agent/cache/cluster_configuration/configurations.json file contains various
passwords in plain text in world readable file
> ------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-15496
>                 URL: https://issues.apache.org/jira/browse/AMBARI-15496
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-agent
>    Affects Versions: 2.1.0, 2.2.0
>            Reporter: Austin Clifford
>            Assignee: Shantanu Mundkur
>              Labels: security
>             Fix For: trunk
>
>         Attachments: AMBARI-15496.patch
>
>
> Various passwords are in plain text in world readable configurations.json file
> $ ls -altr /var/lib/ambari-agent/cache/cluster_configuration/configurations.json
> -rw-r--r-- 1 root root 176342 Mar  4 08:55 /var/lib/ambari-agent/cache/cluster_configuration/configurations.json



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message