Skip to content

When the nebula-console software is used, the plaintext password is leaked by running the ps -ef command #240

Description

@cccxgit

In the startup script of the storaged service container, the nebula-console software is used to perform the add host operation. Also, when I developed the k8s probe, I also used the nebula-console software to check the node serviceability and status.

This has the risk of compromising plaintext password security. When you run the ps -ef command to view the process information, the plaintext password is displayed.

UID   PID  PPID       C  STIME  TTY     TIME      CMD
root  33235 32818  0 21:58    pts/1 00:00:00   nebula-console --addr infinitygraph-graphd-headless --port 8888 -u root -p xxxxxxx

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions