os/env.txt can leak credentials - Githubissues

datastax / diagnostic-collection

Diagnostic Collector for Apache Cassandra

Apache License 2.0

28 stars 35 forks source link

os/env.txt can leak credentials #75

Closed yukim closed 2 years ago

yukim commented 2 years ago

os/env.txt contains the output of env command to store environmental variables.

However, ds-collector sets cqlsh/nodetool credentials as environment variables, these values can appear in the file as well.

% cat os/env.txt | grep -i -e pass -e pw
jmxPassword=xxxxxxx
PWD=/home/zzz
cqlshPassword=xxx
nodetoolCredentials=-u ops -pw xxxxxxx
cqlshOpts= --username=nosql_ops --password=xxx

Consider skipping output of these variables.