Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-10268

couchbase-cli - Arguments with sensitive values

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Fixed
    • Critical
    • 3.0
    • 2.5.0
    • tools
    • Security Level: Public
    • None

    Description

      Currently the `couchbase-cli` utility accepts arguments via command line, including arguments containing sensitive information.

      To avoid exposing sensitive information through the command history or making it visible in utilities like `ps` or `top`, `coucbase-cli` could be improved by accepting arguments containing sensitive information in one or more of the following ways:

      • Prompting specifically for password values
      • Reading arguments from from a configuration file
      • Reading arguments from system environment variables

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              thuan Thuan Nguyen
              bshumate Brian Shumate (Inactive)
              Votes:
              1 Vote for this issue
              Watchers:
              12 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - 1h
                  1h
                  Remaining:
                  Remaining Estimate - 1h
                  1h
                  Logged:
                  Time Spent - Not Specified
                  Not Specified

                  Gerrit Reviews

                    There are no open Gerrit changes

                    PagerDuty