etan39
/
cloudstack
mirror of https://github.com/apache/cloudstack.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
cloudstack/api/src
History
John Burwell ef44c7d305 CLOUDSTACK-8566: Strips the username and password credentials from host details 
... map returned by the following API calls by filtering these fields from the
details attribute in the HostResponse class:

  * listHosts
  * addHost
  * cancelHostMaintenance
  * listHosts
  * prepareHostForMaintenance
  * reconnectHost
  * updateHost

This fix addresses CVE 2015-3251.

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
(cherry picked from commit 3a48171bd8)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
 		2015-08-14 10:49:40 +05:30
..
com/cloud Merge branch 'pr/547' 2015-08-10 19:00:53 -06:00
org/apache/cloudstack CLOUDSTACK-8566: Strips the username and password credentials from host details 2015-08-14 10:49:40 +05:30