*** This bug is a security vulnerability ***
You have been subscribed to a public security bug by Seth Arnold (seth-arnold):
Probe-and-enlist for the SeaMicro chassis writes the power parameters to
maas.log.
Unfortunately, maas.log is world-readable.
We should just log the MAC addresses found, not the power parameters.
** Affects: maas
Importance: Critical
Assignee: Mike Pontillo (mpontillo)
Status: Fix Released
** Affects: maas/1.9
Importance: Critical
Assignee: Mike Pontillo (mpontillo)
Status: Fix Released
--
Probe-and-enlist for SeaMicro chassis writes password to the log
https://bugs.launchpad.net/bugs/1428666
You received this bug notification because you are a member of Ubuntu Bugs,
which is subscribed to the bug report.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
