melicertes / csp

The Cyber Security Platform MeliCERTes is part of the European Strategy for Cyber Security. MeliCERTes is a network for establishing confidence and trust among the national Computer Security Incident Response Teams (CSIRTs) of the Member States and for promoting swift and effective operational cooperation.
Other
30 stars 7 forks source link

Vulnerability report: SMTP credentials in cleartext in log file #42

Open rommelfs opened 5 years ago

rommelfs commented 5 years ago

from /tmp/console.log:

2019-07-16 23:44:31.904  INFO 3082 --- [ool-20-thread-7] c.i.c.c.c.s.ExternalProcessService       :   "mail": {
2019-07-16 23:44:31.904  INFO 3082 --- [ool-20-thread-7] c.i.c.c.c.s.ExternalProcessService       :     "host": "localhost",
2019-07-16 23:44:31.905  INFO 3082 --- [ool-20-thread-7] c.i.c.c.c.s.ExternalProcessService       :     "port": "25",
2019-07-16 23:44:31.905  INFO 3082 --- [ool-20-thread-7] c.i.c.c.c.s.ExternalProcessService       :     "username": "username",
2019-07-16 23:44:31.906  INFO 3082 --- [ool-20-thread-7] c.i.c.c.c.s.ExternalProcessService       :     "password": "password",
[...]