QpidResourceAdapter, ConnectionFactoryProperties prints connection URL in trace 
logs that may contain password info
-------------------------------------------------------------------------------------------------------------------

                 Key: QPID-3764
                 URL: https://issues.apache.org/jira/browse/QPID-3764
             Project: Qpid
          Issue Type: Bug
         Environment: All OS platforms, all supported JEE platforms.
            Reporter: Weston M. Price
            Assignee: Weston M. Price
             Fix For: 0.15


In a few of the JCA classes we are printing the connectionURL to the logs when 
setting the value. The connection URL may contain password info. These 
statements should be removed for security.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:[email protected]

Reply via email to