Abhishek Jain created RANGER-5144:
-------------------------------------

             Summary: [Column Masking] : Exposing Data Secrecy by Displaying 
lowercase/uppercase patterns in Masked Column Data
                 Key: RANGER-5144
                 URL: https://issues.apache.org/jira/browse/RANGER-5144
             Project: Ranger
          Issue Type: Bug
          Components: Ranger
    Affects Versions: 2.4.0
            Reporter: Abhishek Jain


The data secrecy is exposed by displaying the lowercase/uppercase pattern when 
the column masking is applied.

Each uppercase letter in a string is masked with 'X' (capital 'X') and each 
lowercase letter is masked with 'x' (small 'x') which exposes the datapattern 
in that column.

{_}*Example*{_}: 

 
{code:java}
ABHIshek -> XXXXxxxx
abhishek -> xxxxxxxx
{code}
The masking rule should be uniform for both lower/upper case letters.

 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to