Daniel Dai created HIVE-12282:
---------------------------------

             Summary: beeline - update command printing in verbose mode
                 Key: HIVE-12282
                 URL: https://issues.apache.org/jira/browse/HIVE-12282
             Project: Hive
          Issue Type: Bug
          Components: Beeline
            Reporter: Daniel Dai
            Assignee: Daniel Dai
             Fix For: 2.0.0


In verbose mode, beeline prints the password used in commandline to STDERR. 
This is not a good security practice. 

Issue is in BeeLine.java code -
{code}
    if (url != null) {
      String com = "!connect "
          + url + " "
          + (user == null || user.length() == 0 ? "''" : user) + " "
          + (pass == null || pass.length() == 0 ? "''" : pass) + " "
          + (driver == null ? "" : driver);
      debug("issuing: " + com);
      dispatch(com);
    }

{code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to