Armatura One Backup Logs Disclose Superuser Credentials

Executive Summary

Armatura One's backup and restore routine logs the full database connection command, including the superuser password, in plain text on the host system. This exposes sensitive credentials in log files that could be accessed by unauthorized users with server access.

Useful 0 Not Useful 0

Detection Guidance

Check log files for plaintext database connection commands containing superuser passwords. Search for patterns like 'password=' or 'user=' in logs under /var/log or application-specific directories.

Useful 0 Not Useful 0

Impact Analysis

If an attacker gains access to the server operating system, they can retrieve the plaintext password from logs and use it to access the database. This could lead to unauthorized data access, modification, or deletion, depending on the database permissions.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates data protection regulations like GDPR and HIPAA, which require protection of sensitive data including credentials. Unauthorized access to logs containing plaintext passwords could result in compliance violations and potential fines.

Useful 0 Not Useful 0

Mitigation Strategies

Rotate all database superuser passwords immediately. Review and restrict log file permissions to prevent unauthorized access. Update backup and restore routines to avoid logging credentials.

Useful 0 Not Useful 0