SECURITY: Password may be seen in ODBC logs
Details
| Detail name | Value |
|---|---|
| Changelog Number | 15082 |
| Type | Bug |
| Status | Resolved |
| Affected Versions | Exasol 7.1.10 |
| Fix Versions | Exasol 7.1.14, Exasol 8.6.0 |
| Resolution Date | 2022-09-21 |
Description
Only when logging is enabled and the connection string contains the password, the password can be seen in the ODBC log file. This is for example not the case if the password is read from the odbc.ini. Logs are not enabled in most cases of productive usage of the driver.
Workaround
There is no workaround. Please update the ODBC driver to version 7.1.14+.
Fix
The password is removed from the log output.
