N2WS-18738 - Password saved as plain text for Recovery Scenario target added via RestAPI

N2WS-18738 - Password saved as plain text for Recovery Scenario target added via RestAPI

Issue:

When creating Recovery Scenario(CPM v3.0 and up) and adding a backup target via Rest API, it will save the following details as plain text
  1. Proxy password for S3 instance recovery if used
  2. IAM AWS Secret Key when providing alternate Credential


Interim resolution until solution applied
  1. Delete the effected recovery target from the recovery scenario
  2. or remove the proxy details and configure matching S3 worker configuration

Solution:
Upgrade to v4.0


Click here to go back to the Release notes: Release notes for the latest v3.2.x CPM release