New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

couchbase address string together with password opened to the world #1680

Closed

yosefy opened this issue Aug 29, 2016 · 1 comment

Labels

bug

Milestone

yosefy commented Aug 29, 2016

Bug report

Security problem

Relevant telegraf.conf:

System info:

[Include Telegraf version, operating system name, and other relevant details]
ubuntu 14.04

[[inputs.couchbase]]
servers = ["http://admin:xxxxx@localhost:8091"]

Expected behavior:

take couchbase cluster name via rest api from cluster

Actual behavior:

takes address string together with password and opens up to the world
for part of the metrics
for example couchbase_bucket_item_count

Additional info:

couchbase comunity 4.1
telegraf nightly

jwilder added the bug label

dsalbert pushed a commit to dsalbert/telegraf that referenced this issue


          fix issue influxdata#1680

bd56011

dsalbert mentioned this issue

Sanitize password from couchbase metric #1680 #3033

Merged

3 tasks

danielnelson added this to the 1.4.0 milestone

Contributor

danielnelson commented Jul 31, 2017

Fixed in 1.4.0, thanks @DanKans

danielnelson closed this as completed

babs mentioned this issue

Couchbase security problem: credential leakage like #1680 #5215

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment