Project

General

Profile

Actions

Cleanup #49216

closed

mgr/dashboard: delete EOF when reading passwords from file

Added by Alfonso Martínez over 3 years ago. Updated about 3 years ago.

Status:
Resolved
Priority:
High
Category:
General - Back-end
Target version:
% Done:

0%

Tags:
Backport:
pacific octopus nautilus
Reviewed:
Affected Versions:
Pull request ID:

Description

When executing:
1) echo "myPassw0rd" > /tmp/my_secret.txt
(Notice: not using "-n" option; also reproducible by editing the file with text editor that adds a newline separator when saving.)

2) ceph dashboard ac-user-set-password admin -i /tmp/my_secret.txt
(The command succeeds.)

RESULT: the user is not able to log in through dashboard.

EXPECTED RESULT: be able to log in.

FIX: Sanitize the input.


Related issues 4 (0 open4 closed)

Related to Dashboard - Subtask #48355: mgr/dashboard: CLI commands: read passwords from fileResolvedAlfonso Martínez

Actions
Copied to Dashboard - Backport #49270: pacific: mgr/dashboard: delete EOF when reading passwords from fileResolvedAlfonso MartínezActions
Copied to Dashboard - Backport #49271: nautilus: mgr/dashboard: delete EOF when reading passwords from fileResolvedAlfonso MartínezActions
Copied to Dashboard - Backport #49272: octopus: mgr/dashboard: delete EOF when reading passwords from fileResolvedAlfonso MartínezActions
Actions

Also available in: Atom PDF