NShiftKey

• Potential Password Exposure

  • Target Code : accumulo/core/src/main/java/org/apache/accumulo/core/client/security/tokens/PasswordToken.java [view change history] [ignore this]
    

    accumulo/core/src/main/java/org/apache/accumulo/core/client/security/tokens/PasswordToken.java

    Line 97 in 9cd4b2c

    password = passwordTmp;

    
      
  • Target Code : accumulo/core/src/main/thrift-gen-java/org/apache/accumulo/core/clientImpl/thrift/ClientService.java [view change history] [ignore this]
    https://github.com/2lambda123/accumulo/blob/9cd4b2c487251972bfa8bf6b0ba943ab80547826/core/src/main/thrift-gen-java/org/apache/accumulo/core/clientImpl/thrift/ClientService.java#L1434
      
  • Target Code : accumulo/core/src/main/thrift-gen-java/org/apache/accumulo/core/clientImpl/thrift/ClientService.java [view change history] [ignore this]
    https://github.com/2lambda123/accumulo/blob/9cd4b2c487251972bfa8bf6b0ba943ab80547826/core/src/main/thrift-gen-java/org/apache/accumulo/core/clientImpl/thrift/ClientService.java#L1521
      
  • Target Code : accumulo/core/src/main/thrift-gen-java/org/apache/accumulo/core/clientImpl/thrift/ClientService.java [view change history] [ignore this]
    https://github.com/2lambda123/accumulo/blob/9cd4b2c487251972bfa8bf6b0ba943ab80547826/core/src/main/thrift-gen-java/org/apache/accumulo/core/clientImpl/thrift/ClientService.java#L11448
      
  • Target Code : accumulo/core/src/main/thrift-gen-java/org/apache/accumulo/core/clientImpl/thrift/ClientService.java [view change history] [ignore this]
    https://github.com/2lambda123/accumulo/blob/9cd4b2c487251972bfa8bf6b0ba943ab80547826/core/src/main/thrift-gen-java/org/apache/accumulo/core/clientImpl/thrift/ClientService.java#L13524
      
  • Target Code : accumulo/core/src/main/thrift-gen-java/org/apache/accumulo/core/securityImpl/thrift/TDelegationToken.java [view change history] [ignore this]
    

    accumulo/core/src/main/thrift-gen-java/org/apache/accumulo/core/securityImpl/thrift/TDelegationToken.java

    Line 162 in 9cd4b2c

    this.password = password == null ? (java.nio.ByteBuffer)null : java.nio.ByteBuffer.wrap(password.clone());

    
      
  • Target Code : accumulo/core/src/test/java/org/apache/accumulo/core/client/security/tokens/CredentialProviderTokenTest.java [view change history] [ignore this]
    

    accumulo/core/src/test/java/org/apache/accumulo/core/client/security/tokens/CredentialProviderTokenTest.java

    Line 38 in 9cd4b2c

    // Keystore contains: {'root.password':'password', 'bob.password':'bob'}

    
      
  • Target Code : accumulo/minicluster/src/main/java/org/apache/accumulo/cluster/ClusterUser.java [view change history] [ignore this]
    

    accumulo/minicluster/src/main/java/org/apache/accumulo/cluster/ClusterUser.java

    Line 52 in 9cd4b2c

    this.password = password;

    
      
  • Target Code : accumulo/test/src/main/java/org/apache/accumulo/harness/conf/AccumuloMiniClusterConfiguration.java [view change history] [ignore this]
    

    accumulo/test/src/main/java/org/apache/accumulo/harness/conf/AccumuloMiniClusterConfiguration.java

    Line 97 in 9cd4b2c

    password = ACCUMULO_MINI_PASSWORD_DEFAULT;

    
      
  • Target Code : accumulo/test/src/main/java/org/apache/accumulo/harness/conf/StandaloneAccumuloClusterConfiguration.java [view change history] [ignore this]
    

    accumulo/test/src/main/java/org/apache/accumulo/harness/conf/StandaloneAccumuloClusterConfiguration.java

    Line 158 in 9cd4b2c

    password = ACCUMULO_STANDALONE_PASSWORD_DEFAULT;

    
      
  • Target Code : accumulo/test/src/main/java/org/apache/accumulo/test/functional/PermissionsIT.java [view change history] [ignore this]
    

    accumulo/test/src/main/java/org/apache/accumulo/test/functional/PermissionsIT.java

    Line 152 in 9cd4b2c

    String tableName, user, password = "password", namespace;

    
      
  • Target Code : accumulo/test/src/main/java/org/apache/accumulo/test/functional/PermissionsIT.java [view change history] [ignore this]
    

    accumulo/test/src/main/java/org/apache/accumulo/test/functional/PermissionsIT.java

    Line 462 in 9cd4b2c

    String tableName, user, password = "password", namespace;

    
      
  • Target Code : accumulo/test/src/main/java/org/apache/accumulo/test/shell/ShellServerIT.java [view change history] [ignore this]
    

    accumulo/test/src/main/java/org/apache/accumulo/test/shell/ShellServerIT.java

    Line 567 in 9cd4b2c

    String password = "password" + i;

    
      
  • Target Code : accumulo/test/src/main/java/org/apache/accumulo/harness/conf/AccumuloMiniClusterConfiguration.java [view change history] [ignore this]
    

    accumulo/test/src/main/java/org/apache/accumulo/harness/conf/AccumuloMiniClusterConfiguration.java

    Line 46 in 9cd4b2c

    public static final String ACCUMULO_MINI_PASSWORD_KEY = ACCUMULO_MINI_PREFIX + "password";

    
      

• Salt Exposure

  • Target Code : accumulo/core/src/main/java/org/apache/accumulo/core/spi/scan/ConfigurableScanServerSelector.java [view change history] [ignore this]
    

    accumulo/core/src/main/java/org/apache/accumulo/core/spi/scan/ConfigurableScanServerSelector.java

    Line 130 in 9cd4b2c

    * {"servers":"3", "busyTimeout":"30s","salt":"42"},

    
      
  • Target Code : accumulo/core/src/main/java/org/apache/accumulo/core/spi/scan/ConfigurableScanServerSelector.java [view change history] [ignore this]
    

    accumulo/core/src/main/java/org/apache/accumulo/core/spi/scan/ConfigurableScanServerSelector.java

    Line 131 in 9cd4b2c

    * {"servers":"9", "busyTimeout":"60s","salt":"84"}

    
      
  • Target Code : accumulo/core/src/main/java/org/apache/accumulo/core/spi/scan/ConfigurableScanServerSelector.java [view change history] [ignore this]
    

    accumulo/core/src/main/java/org/apache/accumulo/core/spi/scan/ConfigurableScanServerSelector.java

    Line 167 in 9cd4b2c

    + "'attemptPlans':[{'servers':'3', 'busyTimeout':'33ms', 'salt':'one'},"

    
      
  • Target Code : accumulo/core/src/main/java/org/apache/accumulo/core/spi/scan/ConfigurableScanServerSelector.java [view change history] [ignore this]
    

    accumulo/core/src/main/java/org/apache/accumulo/core/spi/scan/ConfigurableScanServerSelector.java

    Line 168 in 9cd4b2c

    + "{'servers':'13', 'busyTimeout':'33ms', 'salt':'two'},"

    
      
  • Target Code : accumulo/core/src/main/java/org/apache/accumulo/core/spi/scan/ConfigurableScanServerSelector.java [view change history] [ignore this]
    

    accumulo/core/src/main/java/org/apache/accumulo/core/spi/scan/ConfigurableScanServerSelector.java

    Line 183 in 9cd4b2c

    String salt = "";

    
      
  • Target Code : accumulo/server/base/src/test/java/org/apache/accumulo/server/security/handler/ZKSecurityToolTest.java [view change history] [ignore this]
    

    accumulo/server/base/src/test/java/org/apache/accumulo/server/security/handler/ZKSecurityToolTest.java

    Line 34 in 9cd4b2c

    private final String TEST_SALT = "$6$test$";

    
      
  • Target Code : accumulo/test/src/main/java/org/apache/accumulo/test/functional/OnDemandTabletUnloadingIT.java [view change history] [ignore this]
    

    accumulo/test/src/main/java/org/apache/accumulo/test/functional/OnDemandTabletUnloadingIT.java

    Line 195 in 9cd4b2c

    + "{'servers':'13', 'busyTimeout':'33ms', 'salt':'two'},"

    
      
  • Target Code : accumulo/test/src/main/java/org/apache/accumulo/test/functional/OnDemandTabletUnloadingIT.java [view change history] [ignore this]
    

    accumulo/test/src/main/java/org/apache/accumulo/test/functional/OnDemandTabletUnloadingIT.java

    Line 194 in 9cd4b2c

    + "'attemptPlans':[{'servers':'3', 'busyTimeout':'33ms', 'salt':'one'},"

    
      

• Secret Information Exposure

  • Target Code : accumulo/core/src/test/resources/accumulo2.properties [view change history] [ignore this]
    

    accumulo/core/src/test/resources/accumulo2.properties

    Line 21 in 9cd4b2c

    instance.secret=mysecret

    
      

• Potential Auth Exposure

  • Target Code : accumulo/core/src/test/java/org/apache/accumulo/core/cli/TestClientOpts.java [view change history] [ignore this]
    

    accumulo/core/src/test/java/org/apache/accumulo/core/cli/TestClientOpts.java

    Line 59 in 9cd4b2c

    "instance.zookeepers=zoo1,zoo2", "-o", "auth.principal=user123"};

    
      

• IP Address Exposure

  • Target Code : accumulo/assemble/src/main/resources/LICENSE [view change history] [ignore this]
    

    accumulo/assemble/src/main/resources/LICENSE

    Line 515 in 9cd4b2c

    http://citeseerx.ist.psu.edu/viewdoc/download;?doi=10.1.1.173.1898&rep=rep1&type=pdf

    
      
  • Target Code : accumulo/core/src/main/java/org/apache/accumulo/core/conf/PropertyType.java [view change history] [ignore this]
    

    accumulo/core/src/main/java/org/apache/accumulo/core/conf/PropertyType.java

    Line 88 in 9cd4b2c

    + " 'localhost:2000,www.example.com,10.10.1.1:500' and 'localhost'.\n"

    
      
  • Target Code : accumulo/core/src/test/java/org/apache/accumulo/core/spi/balancer/TableLoadBalancerTest.java [view change history] [ignore this]
    

    accumulo/core/src/test/java/org/apache/accumulo/core/spi/balancer/TableLoadBalancerTest.java

    Line 141 in 9cd4b2c

    TabletServerId svr = mkts("10.0.0.1", 1234, "0x01020304");

    
      
  • Target Code : accumulo/core/src/test/java/org/apache/accumulo/core/spi/balancer/TableLoadBalancerTest.java [view change history] [ignore this]
    

    accumulo/core/src/test/java/org/apache/accumulo/core/spi/balancer/TableLoadBalancerTest.java

    Line 152 in 9cd4b2c

    state.put(mkts("10.0.0.2", 2345, "0x02030405"), status());

    
      
  • Target Code : accumulo/core/src/test/java/org/apache/accumulo/core/util/HostAndPortComparatorTest.java [view change history] [ignore this]
    

    accumulo/core/src/test/java/org/apache/accumulo/core/util/HostAndPortComparatorTest.java

    Line 97 in 9cd4b2c

    "2001:::1", "192.12.2.1", "192.12.2.1:81", "199.10.1.1:14", "10.100.100.100",

    
      
  • Target Code : accumulo/core/src/test/java/org/apache/accumulo/core/util/HostAndPortComparatorTest.java [view change history] [ignore this]
    

    accumulo/core/src/test/java/org/apache/accumulo/core/util/HostAndPortComparatorTest.java

    Line 107 in 9cd4b2c

    .of("1.1.1.1", "1.1.1.1:24", "1.100.100.100", "10.100.100.100", "100.100.100.100",