(cloudstack) branch 4.20 updated: fix Host Password Exposed in Command-Line Logging (#12016)

[dahn]

This is an automated email from the ASF dual-hosted git repository.

dahn pushed a commit to branch 4.20
in repository https://gitbox.apache.org/repos/asf/cloudstack.git


The following commit(s) were added to refs/heads/4.20 by this push:
     new c0b5358d8eb fix Host Password Exposed in Command-Line Logging (#12016)
c0b5358d8eb is described below

commit c0b5358d8eb55c1611e14528df9df60894b1e3e9
Author: Edward-x <30854794+ylchen-...@users.noreply.github.com>
AuthorDate: Tue Jan 27 19:55:40 2026 +0800

    fix Host Password Exposed in Command-Line Logging (#12016)
---
 .../wrapper/xenbase/CitrixUpdateHostPasswordCommandWrapper.java         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git 
a/plugins/hypervisors/xenserver/src/main/java/com/cloud/hypervisor/xenserver/resource/wrapper/xenbase/CitrixUpdateHostPasswordCommandWrapper.java
 
b/plugins/hypervisors/xenserver/src/main/java/com/cloud/hypervisor/xenserver/resource/wrapper/xenbase/CitrixUpdateHostPasswordCommandWrapper.java
index 1acc292b450..af868d8c1c7 100644
--- 
a/plugins/hypervisors/xenserver/src/main/java/com/cloud/hypervisor/xenserver/resource/wrapper/xenbase/CitrixUpdateHostPasswordCommandWrapper.java
+++ 
b/plugins/hypervisors/xenserver/src/main/java/com/cloud/hypervisor/xenserver/resource/wrapper/xenbase/CitrixUpdateHostPasswordCommandWrapper.java
@@ -45,7 +45,7 @@ public final class CitrixUpdateHostPasswordCommandWrapper 
extends CommandWrapper
 
         Pair<Boolean, String> result;
         try {
-            logger.debug("Executing command in Host: " + cmdLine);
+            logger.debug("Executing password update command on host: {} for 
user: {}", hostIp, username);
             final String hostPassword = citrixResourceBase.getPwdFromQueue();
             result = xenServerUtilitiesHelper.executeSshWrapper(hostIp, 22, 
username, null, hostPassword, cmdLine.toString());
         } catch (final Exception e) {