[MDEV-39841] handlersocket plugin default secret is empty - Jira

XML

Word

Printable

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Critical
Resolution: Fixed
Affects Version/s: 10.6(EOL), 10.11, 11.4, 11.8, 12.3, 13.0
Fix Version/s: 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
Component/s: Authentication and Privilege System
Labels:

Bug Category:
Can result in unexpected behaviour
Sprint:
Q3/2026 Server Maintenance

Description

this means a default configuration with a handlersocket is insecure and a handersocket user has to explicitly set a non-empty secret in the my.cnf file.

A more robust behavior would be the opposite, if one wants an empty secret, this should be explicitly configured, not a default.

Attachments

Activity

People

Assignee:: Sergei Golubchik

Reporter:: Roel Van de Paar

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Dates

Created:: 2026-06-04 05:00

Updated:: 3 days ago 20:13

Resolved:: 2026-07-24 21:12

Time Tracking

Estimated:

5.4h

Remaining:

Logged:

Git Integration

Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.