[
https://issues.apache.org/jira/browse/CLOUDSTACK-10436?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10436:
---
Description:
I think there is a potential securiry issuse in createUniqDir#JavaStorageLayer
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10436?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10436:
---
Description:
I think there is a potential securiry issuse in createUniqDir#JavaStorageLayer
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10436?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10436:
---
Labels: security-issue (was: )
> We need remind users to use correct permission for tmp dir
>
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10436?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10436:
---
Priority: Critical (was: Major)
> We need remind users to use correct permission for tmp dir
lujie created CLOUDSTACK-10436:
--
Summary: We need remind users to use correct permission for tmp dir
Key: CLOUDSTACK-10436
URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10436
Project: CloudStack
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Description:
I think some APIs in VolumeApiServiceImpl lack access check. I will list them
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Description:
I think some APIs in VolumeApiServiceImpl lack access check. I will list them
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Description:
I think some APIs in VolumeApiServiceImpl lack access check. I will list them
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Description:
I think some APIs in VolumeApiServiceImpl lack access check. I will list them
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Description:
I think some APIs in VolumeApiServiceImpl lack access check. I will list them
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Description:
I think some APIs in VolumeApiServiceImpl lack access check. I will list them
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Description:
I think some APIs in VolumeApiServiceImpl lack access check. I will list them
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Description:
I think some APIs in VolumeApiServiceImpl lack access check. I will list them
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Summary: some APIs need access check (was: some APIs in
VolumeApiServiceImpl need access
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Issue Type: Bug (was: New Feature)
> some APIs in VolumeApiServiceImpl need access check
>
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Priority: Blocker (was: Major)
> some APIs in VolumeApiServiceImpl need access check
>
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Description:
I think some APIs in VolumeApiServiceImpl lack access check. I will list them
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Description:
I think some APIs in VolumeApiServiceImpl lack access check. I will list them
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Description:
I think some APIs in VolumeApiServiceImpl lack access check. I will list them
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Description:
it seems that some APIs in VolumeApiServiceImpl lack access check.
list here
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Description: it seems that some API in lack access check (was: it seems
that updateVolume
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
---
Summary: some APIs in VolumeApiServiceImpl need access check (was:
updateVolume should have
lujie created CLOUDSTACK-10434:
--
Summary: updateVolume should have access check
Key: CLOUDSTACK-10434
URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10434
Project: CloudStack
Issue Type:
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10424?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie closed CLOUDSTACK-10424.
--
Resolution: Won't Fix
> Potential sensitive information disclosure
>
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10423?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie resolved CLOUDSTACK-10423.
Resolution: Fixed
> Potential sensitive information disclosure
>
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10425?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17305816#comment-17305816
]
lujie commented on CLOUDSTACK-10425:
closed as fixed
> Potential sensitive information
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10425?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie resolved CLOUDSTACK-10425.
Resolution: Fixed
> Potential sensitive information disclosure
>
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10432:
---
Description: Lots of users had questions on debugging which client access
the CloudStack, like
lujie created CLOUDSTACK-10432:
--
Summary: Audit logging in CloudStack servers.
Key: CLOUDSTACK-10432
URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10432
Project: CloudStack
Issue Type:
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10425?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10425:
---
Attachment: CLOUDSTACK-10425.PNG
> Potential sensitive information disclosure
>
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10425?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10425:
---
Description: !CLOUDSTACK-10425.PNG! (was: !CLOUDSTACK-10425.PNG! )
> Potential sensitive
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10425?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10425:
---
Attachment: (was: CLOUDSTACK-10425.PNG)
> Potential sensitive information disclosure
>
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10425?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10425:
---
Attachment: CLOUDSTACK-10425.PNG
> Potential sensitive information disclosure
>
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10425?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10425:
---
Description: !CLOUDSTACK-10425.PNG!
> Potential sensitive information disclosure
>
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10425?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10425:
---
Attachment: (was: CLOUDSTACK-10425.PNG)
> Potential sensitive information disclosure
>
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10425?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10425:
---
Attachment: CLOUDSTACK-10425.PNG
> Potential sensitive information disclosure
>
lujie created CLOUDSTACK-10425:
--
Summary: Potential sensitive information disclosure
Key: CLOUDSTACK-10425
URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10425
Project: CloudStack
Issue
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10424?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10424:
---
Description:
We should never expose sensitive information by loggging, even at trace level,
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10424?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10424:
---
Description:
We should never expose sensitive information by loggging, even at trace level,
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10424?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10424:
---
Description:
We should never expose sensitive information by loggging, see
lujie created CLOUDSTACK-10424:
--
Summary: Potential sensitive information disclosure
Key: CLOUDSTACK-10424
URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10424
Project: CloudStack
Issue
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10423?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10423:
---
Description:
As shown at
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10423?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10423:
---
Description:
As shown at
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10423?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10423:
---
Description:
As shown at
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10423?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10423:
---
Description:
As shown at
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10423?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10423:
---
Description:
As shown at
lujie created CLOUDSTACK-10423:
--
Summary: Potential sensitive information disclosure
Key: CLOUDSTACK-10423
URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10423
Project: CloudStack
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Attachment: CLOUDSTACK-10356_1.patch
> Fix Some Potential NPE
> ---
>
>
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Description:
We have developed a static analysis tool
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Description:
We have developed a static analysis tool
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Description:
We have developed a static analysis tool
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Description:
We have developed a static analysis tool
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Description:
We have developed a static analysis tool
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Description:
We have developed a static analysis tool to
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Description:
We have developed a static analysis tool to
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Description:
We have developed a static analysis tool to
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Description:
We have developed a static analysis tool to
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Description:
We have developed a static analysis tool to
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Description:
We have developed a static analysis tool to
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Description:
We have developed a static analysis tool to
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Description:
We have developed a static analysis tool to
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Description:
We have developed a static analysis tool to
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Description:
We have developed a static analysis tool to
[
https://issues.apache.org/jira/browse/CLOUDSTACK-10356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10356:
---
Description:
We have developed a static analysis tool to
lujie created CLOUDSTACK-10356:
--
Summary: Fix Some Potential NPE
Key: CLOUDSTACK-10356
URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10356
Project: CloudStack
Issue Type: Bug
65 matches
Mail list logo
