Details
-
Bug
-
Status: Closed (View Workflow)
-
P1
-
Resolution: Done
-
1.0.3
-
Multi-node K8s cluster backed by vSphere
-
-
Concorde - Sprint 113
-
2
-
Scout
-
R1 2021 Hot Fix #1
-
Yes
-
Approved by Security Team (including Mike Gorrell, a member of Cap Planning).
-
TAMU
Description
Update: Approved as R1 2021 Hot Fix by Security Team (including Mike Gorrell) on May 13, 2021.
In the Docker/module logs, when the module first starts the database admin username and password are expressed in plain text. This is a security risk.
Example of the log:
exec java -XX:MaxRAMPercentage=85.0 -Dspring.datasource.username=folio_admin -Dspring.datasource.password=password -Dspring.datasource.url=jdbc:postgresql://pg-folio:5432/okapi_modules -Dspring.kafka.bootstrap-servers=http://kafka-r1:9092 -Dspring.datasource.username=folio_admin -Dspring.datasource.password=password -Dspring.datasource.url=jdbc:postgresql://pg-folio:5432/okapi_modules -Dspring.kafka.bootstrap-servers=http://kafka-r1:9092 -XX:+ExitOnOutOfMemoryError -cp . -jar /usr/verticles/mod-data-export-spring.jar