cloudstack-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sanjay Tripathi" <>
Subject Review Request: CLOUDSTACK-819: createAccount/User API logging password in access log file
Date Mon, 07 Jan 2013 12:47:20 GMT

This is an automatically generated e-mail. To reply, visit:

Review request for cloudstack, Pranav Saxena, Brian Federle, and Jessica Wang.


We are logging passwords for createAccount/User API in the access logs. Though they are md5
hashed but the same can be easily used for logging in. 
UI should make a POST call for them instead of a GET. 

This addresses bug CLOUDSTACK-819.


  ui/scripts/accounts.js de8149f 



Verified on my local CloudStack setup.


Sanjay Tripathi

  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message