engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
java-topology/defects/sendmail-0001/test
History
Exact
russell@unturf.com 0f2062b0cc sendmail: 5-MOAD scan; sendmail-0001 CWE-312 SASL client password logged verbatim at debug level 
getauth() in usersmtp.c logs all SASL auth fields including password
verbatim when tTd(95,5) debug flag is active. Fix: redact password
field with <REDACTED> at log serialization layer. 6/6 tests PASS.
MOADs 0001/0002/0003/0005 CLEAN.
2026-04-03 13:17:05 -04:00
..
test_sendmail_0001.py sendmail: 5-MOAD scan; sendmail-0001 CWE-312 SASL client password logged verbatim at debug level 2026-04-03 13:17:05 -04:00