Bug #9784: status.php: Sanitize bandwidthd db password - pfSense - pfSense bugtracker

Actions

Copy link

Bug #9784

closed

status.php: Sanitize bandwidthd db password

Added by Viktor Gurov about 5 years ago. Updated almost 5 years ago.

Status:

Resolved

Priority:

Normal

Assignee:

Jim Pingle

Category:

Web Interface

Target version:

2.4.5

Start date:

09/23/2019

Due date:

% Done:

100%

Estimated time:

Plus Target Version:

Release Notes:

Affected Version:

2.5.0

Affected Architecture:

Description

config-satinized.xml keeps <postgresqlpasswordenc>:

<bandwidthd>
                        <config>
                                <enable>on</enable>
                                <active_interface>lan</active_interface>
                                <interface_array>lan</interface_array>
                                <subnets_extra></subnets_extra>
                                <promiscuous></promiscuous>
                                <sensorid></sensorid>
                                <drawgraphs>on</drawgraphs>
                                <meta_refresh></meta_refresh>
                                <skipintervals></skipintervals>
                                <graphcutoff></graphcutoff>
                                <outputcdf></outputcdf>
                                <recovercdf></recovercdf>
                                <graph_log_info></graph_log_info>
                                <outputpostgresql>on</outputpostgresql>
                                <postgresqlhost>10.1.1.1</postgresqlhost>
                                <postgresqldatabase>bwdb1</postgresqldatabase>
                                <postgresqlusername>bwdbuser</postgresqlusername>
                                <postgresqlpasswordenc>YndkYnBhc3M=</postgresqlpasswordenc>
                                <advfilter></advfilter>
                        </config>
                </bandwidthd>