Uploaded image for project: 'camunda BPM'
  1. camunda BPM
  2. CAM-14359

information disclosure

XMLWordPrintable

    • Icon: Bug Report Bug Report
    • Resolution: Won't Do
    • Icon: L3 - Default L3 - Default
    • None
    • None
    • documentation

      Environment (Required on creation): 

      Windows or Linux system, Google Chrome

       
       

      Description (Required on creation; please attach any relevant screenshots, stacktraces, log files, etc. to the ticket): 

      Use this : DB_PASSWORD filetype:env   

       

      Steps to reproduce (Required on creation):

      1- open google 

      2-  Put that into a process in the search process :- ` DB_PASSWORD filetype:env`
      3-  Among the results of the search is this link  (https://docs.camunda.org/cawemo/1.5/.env )
       
      4-  After entering we find that I can see it 

      DB_HOST=postgresql.your-company.com DB_PORT=5432 DB_NAME=cawemo DB_USER=cawemo DB_PASSWORD=top-secret-123 ######### # EMAIL # ######### SMTP_HOST=mail.your-company.com SMTP_PORT=587 SMTP_USER=cawemo SMTP_PASSWORD=top-secret-123 SMTP_ENABLE_TLS=true SMTP_FROM_ADDRESS=cawemo@your-company.com SMTP_FROM_NAME=Cawemo

       

                                          1.  

        This is the controller panel for Smart Panels app

          1. لقطة الشاشة 2022-02-12 012729.png
            لقطة الشاشة 2022-02-12 012729.png
            16 kB
          2. لقطة الشاشة 2022-02-12 013455.png
            لقطة الشاشة 2022-02-12 013455.png
            108 kB

            [CAM-14359] information disclosure

            Miklas Boskamp added a comment -

            Hi ellord1001,

            Thank you for contacting us. The page you found is used for demo purposes and does not disclose any actual data.

            If you have any security-related input for use please use the ticket type "Security Report" in the future. This way the ticket would only be visible to you (the reporter) and Camunda and we would not disclose any sensitive data.

            I will close the ticket since there is no disclosed information here.

            Thanks again!
            Best,
            Miklas

            Miklas Boskamp added a comment - Hi ellord1001 , Thank you for contacting us. The page you found is used for demo purposes and does not disclose any actual data. If you have any security-related input for use please use the ticket type "Security Report" in the future. This way the ticket would only be visible to you (the reporter) and Camunda and we would not disclose any sensitive data. I will close the ticket since there is no disclosed information here. Thanks again! Best, Miklas

              Unassigned Unassigned
              ellord1001 EBRAHIM AREF
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: