cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Datapower - Remove password from logs

thorahelge
Participant

We've found that the DataPower plugin writes passwords to the log when log level is set to FINE or lower.

https://github.com/Dynatrace/Dynatrace-AppMon-WebSphere-DataPower-Monitor-Plugin/blob/master/src/DataPower/DataPowerMonitor.java

I know that basic authentication isn't that secure anyway, but logging a password in plaintext still seems excessive. Can I suggest that this is removed?


0 REPLIES 0