SAP Knowledge Base Article - Preview

2930208 - Password is logged as plain text in ljs_trace.log when SCC has "Other Loggers" DEBUG trace enabled

Symptom

You noticed that upon reading SCC trace (ljs_trace.log) in DEBUG level or higher, the password of Administratior user is displayed in clear text, such as below.


   20xx-xx-xx xx:xx:xx,xxx +0800#DEBUG#org.apache.tomcat.util.http.Parameters#http-bio-8443-exec-2#  #Start processing with input [j_username=<SCC admin user ID>&j_password=<password>]|    


Read more...

Environment

SAP Cloud Connector (SCC) 2.13 downwards version

Keywords

free text, clear text, mask, debug trace, ljs trace, password, passwd, pass, DEBUG, org.apache.tomcat.util.http.Parameters, Start processing with input, user, username, SCC, SAP Cloud connector, SAP CC, CC, Web UI, WebUI, UI, apache, tomcat , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.