[JENKINS-18244] Passwords should not be stored as clear text in config.xml and should not be printed out to the log (praqma case 9463)

RQM plugin v1.0 stores the password for the RQM server in clear text in the config.xml for the project

In addition, it prints the password out to the log.

Passwords should be at least obscured. It's common to use 64 bit encoding to store in flat text config files.

Passwords should probably also NOT be printed to the log... ever.

Eric Anker created issue - 2013-06-06 21:17

Pseudo-linking to internal tracker

Jens Brejner added a comment - 2013-06-07 06:58 Pseudo-linking to internal tracker

Jens Brejner made changes - 2013-06-07 06:58

Summary

Original: Passwords should not be stored as clear text in config.xml and should not be printed out to the log

New: Passwords should not be stored as clear text in config.xml and should not be printed out to the log (praqma case 9463))

Jens Brejner made changes - 2013-06-07 07:04

Summary

Original: Passwords should not be stored as clear text in config.xml and should not be printed out to the log (praqma case 9463))

New: Passwords should not be stored as clear text in config.xml and should not be printed out to the log (praqma case 9463)

Daniel Beck made changes - 2014-10-06 22:17

Component/s	Original: plugin [ 15491 ]
Labels	Original: configuration plugin security	New: configuration security

R. Tyler Croy made changes - 2016-07-25 23:50

Workflow

Original: JNJira [ 149549 ]

New: JNJira + In-Review [ 177402 ]

Jenkins