Project

General

Profile

Actions
Copy link

Bug #65692

open

Body of POST requests is dumped into the RGW log file (at level 10) which might contain sensitive info such as user name/password.

Added by Igor Gomon 18 days ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
% Done:

0%

Source:
Tags:
rgw
Backport:
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

Body of POST requests is dumped into the RGW log file (at level 10) which might contain sensitive info such as user name/password etc.
There must be a way to prevent it.

No data to display

Actions
Copy link

Also available in: Atom PDF