Verification for 6.5.2-6624 on Windows:
This ticket seems to discuss two related issues.
1. The first issue is that cbbackupmgr logged AWS credentials, this only affects versions 6.6.x and above.
Cbbackupmgr in version 6.5.2 cannot backup to s3 so it is not affected by this issue.
2. The second issue is that process arguments were being logged revealing sensitive information.
We can check that this is fixed by running various cbbackupmgr sub-commands and checking if process arguments are leaked and if any sensitive information is revealed.
I created a backup archive, performed 3 backups and used the info command to check which backups exist.
I then used the collect-log sub command to produce the following logs:
I performed a case-case-insensistive grep for 'administrator' and 'password'. In addition, I do not seem to see any process arguments.
(It's definitely worth if someone could take a second look at these).
An additional collection where I also performed the restore command.
The grep results:
sadzaidi@EM224 cbbackupmgr-collectinfo-my_archive-2021-01-28T185045 % grep -ri 'administrator' ./
asadzaidi@EM224 cbbackupmgr-collectinfo-my_archive-2021-01-28T185045 % grep -ri 'password' ./
.//system_info.log:AdminPasswordStatus AutomaticManagedPagefile AutomaticResetBootOption AutomaticResetCapability BootOptionOnLimit BootOptionOnWatchDog BootROMSupported BootStatus BootupState Caption ChassisBootupState ChassisSKUNumber CreationClassName CurrentTimeZone DaylightInEffect Description DNSHostName Domain DomainRole EnableDaylightSavingsTime FrontPanelResetStatus HypervisorPresent InfraredSupported InitialLoadInfo InstallDate KeyboardPasswordStatus LastLoadInfo Manufacturer Model Name NameFormat NetworkServerModeEnabled NumberOfLogicalProcessors NumberOfProcessors OEMLogoBitmap OEMStringArray PartOfDomain PauseAfterReset PCSystemType PCSystemTypeEx PowerManagementCapabilities PowerManagementSupported PowerOnPasswordStatus PowerState PowerSupplyState PrimaryOwnerContact PrimaryOwnerName ResetCapability ResetCount ResetLimit Roles Status SupportContactDescription SystemFamily SystemSKUNumber SystemStartupDelay SystemStartupOptions SystemStartupSetting SystemType ThermalState TotalPhysicalMemory UserName WakeUpType Workgroup
asadzaidi@EM224 cbbackupmgr-collectinfo-my_archive-2021-01-28T185045 %