Fixed
Details
Assignee
fookerfookerReporter
fookerfookerLabels
Story Points
3Sprint
NoneFix versions
Affects versions
Priority
Minor
Details
Details
Assignee
fooker
fookerReporter
fooker
fookerLabels
Story Points
3
Sprint
None
Fix versions
Affects versions
Priority
PagerDuty
PagerDuty
PagerDuty
Created March 29, 2022 at 8:59 AM
Updated June 7, 2022 at 4:51 PM
Resolved April 28, 2022 at 5:09 PM
When opening a connection to a remote device, we should verify the host key against a known fingerprint. This fingerprint should be stored in metadata. This can be opt-in by not doing a check if no host-key is assigned.
Without host-key checking, we will send the username/password credentials to every host on which the monitor is configured. This could potentially leak the credentials..