[
https://issues.apache.org/jira/browse/DBCP-562?focusedWorklogId=593929&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-593929
]
ASF GitHub Bot logged work on DBCP-562:
---------------------------------------
Author: ASF GitHub Bot
Created on: 10/May/21 12:00
Start Date: 10/May/21 12:00
Worklog Time Spent: 10m
Work Description: garydgregory commented on pull request #38:
URL: https://github.com/apache/commons-dbcp/pull/38#issuecomment-836609786
That's on my to-do list, pleas be patient, no guarantee, we are all
volunteers, step one is to review...
Gary
On Mon, May 10, 2021, 01:43 ManjunathMS35 ***@***.***> wrote:
> Hello, when could be the new release with this fix?
>
> —
> You are receiving this because you were mentioned.
> Reply to this email directly, view it on GitHub
> <https://github.com/apache/commons-dbcp/pull/38#issuecomment-836206072>,
> or unsubscribe
>
<https://github.com/notifications/unsubscribe-auth/AAJB6NZKMIRSCAURVTJSQSTTM5XA5ANCNFSM4LB2TRIA>
> .
>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
Issue Time Tracking
-------------------
Worklog Id: (was: 593929)
Time Spent: 1h 40m (was: 1.5h)
> Password should not be exposed via JMXBean
> ------------------------------------------
>
> Key: DBCP-562
> URL: https://issues.apache.org/jira/browse/DBCP-562
> Project: Commons DBCP
> Issue Type: Bug
> Affects Versions: 2.5.0, 2.7.0
> Reporter: Frank Gasdorf
> Priority: Critical
> Labels: security
> Time Spent: 1h 40m
> Remaining Estimate: 0h
>
> if a BasicDataSource is created with jmxName set, password property is
> exposed/exported via jmx and is visible for everybody who is connected to jmx
> port.
>
> Expectation : Do not export it via BasicDataSourceMXBean Interface
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
