ansible-collections / community.zabbix

Zabbix Ansible modules
http://galaxy.ansible.com/community/zabbix
Other
315 stars 265 forks source link

HTTP API module logs password #1223

Open PenelopeFudd opened 1 month ago

PenelopeFudd commented 1 month ago
SUMMARY

Our zabbix server had a database issue and was denying logins. When we ran our playbook, the connection failed (expected), but the username+password were logged (unexpected).

ISSUE TYPE
COMPONENT NAME

community.zabbix This line: https://github.com/ansible-collections/community.zabbix/blob/main/plugins/httpapi/zabbix.py#L174

ANSIBLE VERSION

n/a

CONFIGURATION

n/a

OS / ENVIRONMENT / Zabbix Version

n/a

STEPS TO REPRODUCE
  1. Break your zabbix server
  2. Try running anything
EXPECTED RESULTS

An error log with password obfuscated.

ACTUAL RESULTS

An error log with username and password showing.