[BGPCEP-831] Plain text password present in bgp PCEP config xml files Created: 19/Jul/18  Updated: 16/Nov/21  Resolved: 16/Nov/21

Status: Resolved
Project: bgpcep
Component/s: None
Affects Version/s: None
Fix Version/s: None

Type: Bug Priority: Medium
Reporter: Nishchya Gupta Assignee: Unassigned
Resolution: Won't Do Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified


 Description   

We have encounterd instances in pcep-config-example-0.9.0-SNAPSHOT-network-topology-pcep-initial-config.xml and bgp-bmp-config-example-0.9.0-SNAPSHOT-odl-bmp-monitors-config.xml file which are listed below.
Please verify and see if passwords are in plain text remove these instances.

opendaylight/bgpcep/pcep-config-example/0.9.0-SNAPSHOT/pcep-config-example-0.9.0-SNAPSHOT-network-topology-pcep-initial-config.xml
<password>topsecret</password>

opendaylight/bgpcep/bgp-bmp-config-example/0.9.0-SNAPSHOT/bgp-bmp-config-example-0.9.0-SNAPSHOT-odl-bmp-monitors-config.xml
<password>changeme</password>

 Comments   
Comment by Robert Varga [ 16/Nov/21 ]

These are well-known examples, I don't see how we can remove them.

Generated at Wed Feb 07 19:14:14 UTC 2024 using Jira 8.20.10#820010-sha1:ace47f9899e9ee25d7157d59aa17ab06aee30d3d.