[ 
https://issues.apache.org/jira/browse/CASSANDRA-13763?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

C. Scott Andreas resolved CASSANDRA-13763.
------------------------------------------
    Resolution: Not A Problem

> Trivial but potential security issue? 
> --------------------------------------
>
>                 Key: CASSANDRA-13763
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-13763
>             Project: Cassandra
>          Issue Type: Bug
>          Components: Legacy/Tools
>            Reporter: JC
>            Priority: Trivial
>
> Hi
> In a recent github mirror, I've found the following line.
> Path: tools/stress/src/org/apache/cassandra/stress/settings/SettingsMode.java
> {code:java}
> 177         out.printf("  Password: %s%n", 
> (password==null?password:"*suppressed    *"));
> {code}
> As the original password is intended to be masked as "*suppressed   *", I was 
> wondering if showing "null" when the password is null is safe. This might not 
> be an issue but I wanted to report just in case. Thanks!



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org

Reply via email to