Masked Password Clearly visible as plain text in console output.

This issue is archived. You can view it, but you can't modify it. Learn more

XMLWordPrintable

            • VERY CRITICAL *****

      Masked Password Clearly visible.

      When checkbox option "Pass build variables as properties" is marked as true. Global password will be clearly visible in console output. It was found in version 1.20, it was not in version 1.16.

      Please Fix this issue as soon as possible, as it is a security threat for us.

      For reference attaching image. in which global declared password visible clearly with msbuild command.

      but not visible when I echo in windows batch command.

            Assignee:
            kdsweeney
            Reporter:
            Arpit Nagar
            Archiver:
            Jenkins Service Account

              Created:
              Updated:
              Resolved:
              Archived: