From 779aace1ccc48e47f718a8c2da15431e497e855e Mon Sep 17 00:00:00 2001 From: Carlos Ruiz Date: Sat, 3 Sep 2016 18:29:39 +0200 Subject: [PATCH] Security issue - passwords must not be written in logs --- org.adempiere.base/src/org/compiere/model/MUser.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/org.adempiere.base/src/org/compiere/model/MUser.java b/org.adempiere.base/src/org/compiere/model/MUser.java index 99e5541b32..130d03e931 100644 --- a/org.adempiere.base/src/org/compiere/model/MUser.java +++ b/org.adempiere.base/src/org/compiere/model/MUser.java @@ -173,7 +173,7 @@ public class MUser extends X_AD_User { if (name == null || name.length() == 0 || password == null || password.length() == 0) { - s_log.warning ("Invalid Name/Password = " + name + "/" + password); + s_log.warning ("Invalid Name/Password = " + name); return null; } boolean hash_password = MSysConfig.getBooleanValue(MSysConfig.USER_PASSWORD_HASH, false);