etan39
/
cloudstack
mirror of https://github.com/apache/cloudstack.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
cloudstack/api/test
History
John Burwell ef44c7d305 CLOUDSTACK-8566: Strips the username and password credentials from host details 
... map returned by the following API calls by filtering these fields from the
details attribute in the HostResponse class:

  * listHosts
  * addHost
  * cancelHostMaintenance
  * listHosts
  * prepareHostForMaintenance
  * reconnectHost
  * updateHost

This fix addresses CVE 2015-3251.

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
(cherry picked from commit 3a48171bd8)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
 		2015-08-14 10:49:40 +05:30
..
com/cloud/network check for BroadcastDomainTypes on sourceNatIp 2014-01-06 22:13:51 +01:00
integration/api CLOUDSTACK-6006: Remove integration folder and lib 2014-02-04 12:01:58 +05:30
org/apache/cloudstack CLOUDSTACK-8566: Strips the username and password credentials from host details 2015-08-14 10:49:40 +05:30