AWS access key disclosed in logs

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 7.0 DE (7.0.10), 7.1 DXP (7.1.10)
• Fix Version/s: 7.0.X EE, 7.1.x EE
• Component/s: Fault Tolerance > Clustering Framework, Security Vulnerability
• Labels:
  • liferay-dxp-70-sp9
  • liferay-dxp-71-sp1
  • liferay-fixpack-de-60-7010
  • liferay-fixpack-dxp-1-7110
  • lsv
  • lsv-410
  • sev-3
• 7.0 Fix Pack Version: 60
• 7.1 Fix Pack Version: 1

Description
AWS access key appears in the logs in Liferay DXP 7.1 and DXP 7.0.

Mitigation
Navigate to 'Server Administration' in the Control Panel and select the 'Log Levels' tab. Locate the 'com.liferay.portal.cluster' category and change the level to WARN, ERROR, FATAL or OFF.