Skip to content

Bearer token plaintext in error logs of the worker #9693

@r4zr1

Description

@r4zr1

Description

Bearer token appears in plaintext in the error log of a worker when connection to a server couldn't be established

request=request)\nrequests.exceptions.ConnectionError: HTTPConnectionPool(host='opencti-server', port=80): Max retries exceeded with url: /graphql (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7fa65e67b9d0>: Failed to establish a new connection: [Errno 111] Connection refused'))", "taskName": null, "attributes": {"reason": "HTTPConnectionPool(host='opencti-server', port=80): Max retries exceeded with url: /graphql (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7fa65e67b9d0>: Failed to establish a new connection: [Errno 111] Connection refused'))", "headers": "{'User-Agent': 'pycti/6.4.5', 'Authorization': 'Bearer 11111111-2222-3333-4444-3350638cf469'}"}}

Environment

  1. OS (where OpenCTI server runs): k8s (opencti/platform)
  2. OpenCTI version: 6.4.8
  3. env:
    WORKER_LOG_LEVEL: error

Metadata

Metadata

Assignees

Labels

buguse for describing something not working as expectedsecurityuse to identify issue related to securitysolveduse to identify issue that has been solved (must be linked to the solving PR)

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions