etan39
/
cloudstack
mirror of https://github.com/apache/cloudstack.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
cloudstack/api
History
John Burwell ef44c7d305 CLOUDSTACK-8566: Strips the username and password credentials from host details 
... map returned by the following API calls by filtering these fields from the
details attribute in the HostResponse class:

  * listHosts
  * addHost
  * cancelHostMaintenance
  * listHosts
  * prepareHostForMaintenance
  * reconnectHost
  * updateHost

This fix addresses CVE 2015-3251.

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
(cherry picked from commit 3a48171bd8)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
 		2015-08-14 10:49:40 +05:30
..
resources/META-INF/cloudstack Removed "host" config parameter definition from ClusterManager interface as it got moved to cloud-api package 2014-01-21 17:19:52 -08:00
src CLOUDSTACK-8566: Strips the username and password credentials from host details 2015-08-14 10:49:40 +05:30
test CLOUDSTACK-8566: Strips the username and password credentials from host details 2015-08-14 10:49:40 +05:30
pom.xml Bump master version to 4.6.0-SNAPSHOT after branching 4.5.0-SNAPSHOT 2014-10-29 14:54:23 +01:00