Files
felhom.eu/documentation/audits/evidence-p1fixes-2026-09-15/B4-filebrowser-9202.txt
T

75 lines
4.1 KiB
Plaintext

are supported and installed on your system.
## 2026-09-15T08:16:29Z 9202 BEFORE: controller=gitea.dooplex.hu/admin/felhom-controller:0.242.0
Unable to find image 'curlimages/curl:8.10.1' locally
8.10.1: Pulling from curlimages/curl
43c4264eed91: Pulling fs layer
b68d62cb323c: Pulling fs layer
4ca545ee6d5d: Pulling fs layer
43c4264eed91: Verifying Checksum
43c4264eed91: Download complete
4ca545ee6d5d: Verifying Checksum
4ca545ee6d5d: Download complete
b68d62cb323c: Verifying Checksum
b68d62cb323c: Download complete
43c4264eed91: Pull complete
b68d62cb323c: Pull complete
4ca545ee6d5d: Pull complete
Digest: sha256:d9b4541e214bcd85196d6e92e2753ac6d0ea699f0af5741f8c6cccbfcf00ef4b
Status: Downloaded newer image for curlimages/curl:8.10.1
admin/admin -> 200 wrong -> 401
## 2026-09-15T08:16:34Z switched to 0.243.0; waiting for the base-stack tick
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
sh: 1: Syntax error: Unterminated quoted string
## 2026-09-15T08:21:37Z settings:
admin/admin -> 401 wrong -> 401
2026/09/15 08:16:35 filebrowser_password.go:139: [INFO] [infra] filebrowser: admin/admin replaced by a generated password (value never logged); verified new=200 admin=401
2026/09/15 08:18:34 manager.go:558: [DEBUG] [stacks] ScanStacks: found stack "filebrowser" deployed=false composePath=/opt/docker/stacks/filebrowser/docker-compose.yml
2026/09/15 08:20:34 manager.go:558: [DEBUG] [stacks] ScanStacks: found stack "filebrowser" deployed=false composePath=/opt/docker/stacks/filebrowser/docker-compose.yml
6d206504c99e filebrowser filebrowser gtstef/filebrowser:1.3.3-stable
2026/09/15 08:21:34 dbdump.go:169: [DEBUG] DiscoverDatabases: skipping container filebrowser (image=gtstef/filebrowser:1.3.3-stable, not a database)
gitea.dooplex.hu/admin/felhom-controller:0.243.0 running
state:
decided_at:
enc stored: 0
plaintext-looking 16-char field present: 0
settings files: /opt/docker/felhom-controller/data/settings.json
== /opt/docker/felhom-controller/data/settings.json
"filebrowser_admin_state": "generated"
"filebrowser_admin_decided_at": "2026-09-15T08:16:35Z"
1
## 2026-09-15T08:40:19Z via LAN https://192.168.0.114 (the endpoints the UI calls):
app page: card/reveal/admin counts as above
reveal -> password length 16 expected
files login: revealed=401 admin/admin=401 wrong=401
## CORRECTION 2026-09-15T08:40:31Z: the 08:40:19Z block above is INVALID — the dashboard password loaded as an empty string (read_credential.py call wrong), so there was no login, no session and no reveal; 'revealed=401' was an EMPTY password. Only admin/admin=401 and wrong=401 stand from that block. Re-run follows.
## RE-RUN 2026-09-15T08:40:48Z via LAN https://192.168.0.114, the endpoints the UI calls (login → /apps/filebrowser → POST reveal → FileBrowser login):
files login: revealed=200 admin/admin=401 wrong=401