Bug #7563
closed
PassiveDNS REST API token displayed to user on connection error
Added by Radko Krkoš about 2 years ago.
Updated about 2 years ago.
Category:
Development - GUI
Description
The complete URL is displayed to the user on communication error with external service. In case of PassiveDNS connection, the URL contains the access token, whích should be kept secret. The current token was already disclosed and must be regenerated, but this has to be also fixed.
- Related to Support #7564: Renew the PassiveDNS REST API token added
- Assignee set to Rajmund Hruška
- Target version changed from Backlog to 2.9
- Status changed from New to Resolved
- % Done changed from 0 to 100
I fixed the error message in e626dcfa. I checked the other places where pdns is used and there shouldn't be any problems. I also looked at NERD to check if the similar problem exists there but it seems to be fine there.
- Status changed from Resolved to In Review
- To be discussed deleted (
Yes)
Also FLAB Pentest 2022-03 no. 35
- Status changed from In Review to Closed
Also available in: Atom
PDF