Splunk Universal Forwarder has hardcoded credentials in entrypoint.sh

splunk / docker-splunk-legacy

Docker Splunk *** LEGACY IMAGES - PLEASE SEE https://github.com/splunk/docker-splunk INSTEAD ***

https://www.splunk.com

Apache License 2.0

308 stars 262 forks source link

Splunk Universal Forwarder has hardcoded credentials in entrypoint.sh #62

Open rujic opened 6 years ago

rujic commented 6 years ago

Currently, in entrypoint.sh for Splunk Universal Forwarder, under start-service, it is using "admin:changeme" credential for a few commands, in which is hardcoded. This either needs to be configurable or removed (don't require authentication for such commands)

halr9000 commented 6 years ago

Noted internally (Solunker), thanks for bringing this to our attention @rujic

halr9000 commented 6 years ago

FWIW, concerned customers may inquire about PBL-12591 by opening a support case w/Splunk. Those w/o a support contract can mention me and I'll help if I can.