[
https://issues.apache.org/jira/browse/AMBARI-15496?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Shantanu Mundkur updated AMBARI-15496:
--------------------------------------
Status: Patch Available (was: Open)
> /var/lib/ambari-agent/cache/cluster_configuration/configurations.json file
> contains various passwords in plain text in world readable file
> ------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: AMBARI-15496
> URL: https://issues.apache.org/jira/browse/AMBARI-15496
> Project: Ambari
> Issue Type: Bug
> Components: ambari-agent
> Affects Versions: 2.1.0, 2.2.0, 2.2.1
> Reporter: Austin Clifford
> Assignee: Shantanu Mundkur
> Labels: security
> Fix For: trunk
>
> Attachments: AMBARI-15496.patch, AMBARI-15496.patch
>
>
> Various passwords are in plain text in world readable configurations.json file
> $ ls -altr
> /var/lib/ambari-agent/cache/cluster_configuration/configurations.json
> -rw-r--r-- 1 root root 176342 Mar 4 08:55
> /var/lib/ambari-agent/cache/cluster_configuration/configurations.json
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
