KMS master key exposure via unredacted credential serialization in driver settings string (port to main branch)

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Unresolved
    • Priority: Critical - P2
    • 4.0.0
    • Affects Version/s: None
    • Component/s: None
    • None
    • 0.5
    • Dotnet Drivers
    • None
    • None
    • None
    • None
    • None
    • None

      AutoEncryptionOptions.ToString() serializes the full kmsProviders map with values included, so KMS credentials and the local master key appear verbatim in MongoClientSettings.ToString() and in anything that logs it. The same method already redacts TLS options as <hidden>, so apply that pattern to kmsProviders.
      Affects both 3.x and 2.x

            Assignee:
            Ferdinando Papale
            Reporter:
            Oleksandr Poliakov
            None
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: