Mikael Grevsten created CAMEL-10869:
---------------------------------------

             Summary: TRACE on ftp component reveals password
                 Key: CAMEL-10869
                 URL: https://issues.apache.org/jira/browse/CAMEL-10869
             Project: Camel
          Issue Type: Improvement
          Components: camel-ftp
    Affects Versions: 2.18.2
            Reporter: Mikael Grevsten


When TRACE level is on using a ftp component the password is displayed in plain 
text.

{{2017-02-21 11:26:28:361 o.a.c.c.f.remote.RemoteFileProducer DEBUG - Not 
already connected/logged in. Connecting to: 
ftp://192.168.170.33/mgr/out?allowNullBody=false&consumer.bridgeErrorHandler=true&disconnect=true&password=xxxxxx&pollStrategy=%23defaultPollStrategy&throwExceptionOnConnectFailed=true&username=mgr
2017-02-21 11:26:28:361 o.a.c.c.file.remote.FtpOperations TRACE - Connecting 
using FTPClient: org.apache.commons.net.ftp.FTPClient@456abb66
2017-02-21 11:26:28:361 o.a.c.c.file.remote.FtpOperations TRACE - Connecting to 
ftp://[email protected]:21 using connection timeout: 10000
2017-02-21 11:26:28:377 o.a.c.c.file.remote.FtpOperations TRACE - Using 
SoTimeout=300000
2017-02-21 11:26:28:377 o.a.c.c.file.remote.FtpOperations TRACE - Attempting to 
login user: mgr using password: gsxr1100
2017-02-21 11:26:28:845 o.a.c.c.file.remote.FtpOperations TRACE - User mgr 
logged in: true}}




--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to