MAAS

  1. Bug #1436279
  2. Comment #11

Comment 11 for bug 1436279

Revision history for this message
Raphaël Badin (rvb) wrote :

> You are correct about the SSL, but I still don't fill this is critical. The login credentials are not sent over the
> websocket, only communication data.

Mike is right: the websocket stream contains BMC credentials. This alone makes the issue critical.