)]}'
{"security-notes/OSSN-0067":[{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"eb126fb8accf1688193a17578b9e1ec08f99355e","unresolved":false,"context_lines":[{"line_number":2,"context_line":"---"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"},{"line_number":5,"context_line":"Barbican server discloses SQL Connection String and X-auth token"},{"line_number":6,"context_line":"values via LOG.debug statements. If the log level set to DEBUG,"},{"line_number":7,"context_line":"barbican logs will disclosed sensitive information and potentially"},{"line_number":8,"context_line":"put the barbican user data at risk. Once this is compromised,"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"dada55a8_00f02166","line":5,"range":{"start_line":5,"start_character":52,"end_line":5,"end_character":64},"updated":"2016-07-21 03:39:44.000000000","message":"X-Auth-Token","commit_id":"b9a5674e5848b64e3f93aa16877d4d2bd1dc05cf"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"eb126fb8accf1688193a17578b9e1ec08f99355e","unresolved":false,"context_lines":[{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"},{"line_number":5,"context_line":"Barbican server discloses SQL Connection String and X-auth token"},{"line_number":6,"context_line":"values via LOG.debug statements. If the log level set to DEBUG,"},{"line_number":7,"context_line":"barbican logs will disclosed sensitive information and potentially"},{"line_number":8,"context_line":"put the barbican user data at risk. Once this is compromised,"},{"line_number":9,"context_line":"it is possible for an attacker to manipulate the barbican backend data"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"dada55a8_e0f4ed5b","line":6,"range":{"start_line":6,"start_character":50,"end_line":6,"end_character":53},"updated":"2016-07-21 03:39:44.000000000","message":"is set","commit_id":"b9a5674e5848b64e3f93aa16877d4d2bd1dc05cf"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"eb126fb8accf1688193a17578b9e1ec08f99355e","unresolved":false,"context_lines":[{"line_number":13,"context_line":"Barbican, Liberty, Mitaka"},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"### Discussion ###"},{"line_number":16,"context_line":"This is not a critical issue in terms of Severity, since production"},{"line_number":17,"context_line":"systems does not run in DEBUG mode."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"### Recommended Actions ###"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"dada55a8_0062e13d","line":16,"range":{"start_line":16,"start_character":41,"end_line":16,"end_character":49},"updated":"2016-07-21 03:39:44.000000000","message":"severity","commit_id":"b9a5674e5848b64e3f93aa16877d4d2bd1dc05cf"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"eb126fb8accf1688193a17578b9e1ec08f99355e","unresolved":false,"context_lines":[{"line_number":17,"context_line":"systems does not run in DEBUG mode."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"### Recommended Actions ###"},{"line_number":20,"context_line":"If you run the production systems on debug mode, We recommend that"},{"line_number":21,"context_line":"you put proper access control on the log files, since those will"},{"line_number":22,"context_line":"contain sensitive information like SQL Database conneciton details"},{"line_number":23,"context_line":"including username and password."}],"source_content_type":"application/octet-stream","patch_set":2,"id":"dada55a8_205d6579","line":20,"range":{"start_line":20,"start_character":34,"end_line":20,"end_character":36},"updated":"2016-07-21 03:39:44.000000000","message":"in","commit_id":"b9a5674e5848b64e3f93aa16877d4d2bd1dc05cf"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"eb126fb8accf1688193a17578b9e1ec08f99355e","unresolved":false,"context_lines":[{"line_number":17,"context_line":"systems does not run in DEBUG mode."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"### Recommended Actions ###"},{"line_number":20,"context_line":"If you run the production systems on debug mode, We recommend that"},{"line_number":21,"context_line":"you put proper access control on the log files, since those will"},{"line_number":22,"context_line":"contain sensitive information like SQL Database conneciton details"},{"line_number":23,"context_line":"including username and password."}],"source_content_type":"application/octet-stream","patch_set":2,"id":"dada55a8_8056d159","line":20,"range":{"start_line":20,"start_character":49,"end_line":20,"end_character":51},"updated":"2016-07-21 03:39:44.000000000","message":"we","commit_id":"b9a5674e5848b64e3f93aa16877d4d2bd1dc05cf"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"eb126fb8accf1688193a17578b9e1ec08f99355e","unresolved":false,"context_lines":[{"line_number":19,"context_line":"### Recommended Actions ###"},{"line_number":20,"context_line":"If you run the production systems on debug mode, We recommend that"},{"line_number":21,"context_line":"you put proper access control on the log files, since those will"},{"line_number":22,"context_line":"contain sensitive information like SQL Database conneciton details"},{"line_number":23,"context_line":"including username and password."},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"---- begin Source Code snippet ----"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"dada55a8_c04c49ca","line":22,"range":{"start_line":22,"start_character":39,"end_line":22,"end_character":47},"updated":"2016-07-21 03:39:44.000000000","message":"database","commit_id":"b9a5674e5848b64e3f93aa16877d4d2bd1dc05cf"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"eb126fb8accf1688193a17578b9e1ec08f99355e","unresolved":false,"context_lines":[{"line_number":33,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/barbican/+bug/1567500"},{"line_number":34,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"},{"line_number":35,"context_line":"OpenStack Security Group : https://launchpad.net/~openstack-ossg"},{"line_number":36,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":2,"id":"dada55a8_40cfb928","line":36,"updated":"2016-07-21 03:39:44.000000000","message":"remove extra blank line","commit_id":"b9a5674e5848b64e3f93aa16877d4d2bd1dc05cf"}]}