Uploaded image for project: 'camunda BPM'
  1. camunda BPM
  2. CAM-9710

Sensitive data logged on engine start

XMLWordPrintable

      Start spring boot starter with configured admin user. The following log level is set by default: org.camunda.bpm.engine.cfg=INFO
      You can see the following trace is the output:

      2019-02-04 11:56:48.962  INFO 14520 --- [           main] org.camunda.bpm.engine.cfg               : ENGINE-12003 Plugin 'CompositeProcessEnginePlugin[genericPropertiesConfiguration, camundaProcessEngineConfiguration, camundaDatasourceConfiguration, camundaJobConfiguration, camundaHistoryConfiguration, camundaMetricsConfiguration, camundaAuthorizationConfiguration, CreateAdminUserConfiguration[adminUser=AdminUserProperty[id=kermit, firstName=Kermit, lastName=Kermit, email=kermit@localhost, password=demodemo]], enterLicenseKeyConfiguration, failedJobConfiguration, CreateFilterConfiguration[filterName=All], disableDeploymentResourcePattern]' activated on process engine 'default'

      We should consider to do not print the sensitive data in this output.

      Hint:
      https://github.com/camunda/camunda-bpm-spring-boot-starter/blob/master/starter/src/main/java/org/camunda/bpm/spring/boot/starter/property/AdminUserProperty.java#L100

        This is the controller panel for Smart Panels app

              miklas.boskamp Miklas Boskamp
              yana.vasileva Yana Vasileva
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: