Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-25735

Mask Passwords doen't mask Credentials Parameter



    • New Feature
    • Status: Resolved (View Workflow)
    • Minor
    • Resolution: Fixed
    • mask-passwords-plugin
    • None


      After installing Mask Passwords Plugin 2.7.2, it allows the system configuration to set the passwords to be masked. One of which is Credentials Parameter.

      However, in a project, if mask passwords is selected and an existing credential is used in the build step, the information is still displayed plaintext within the console output.

      Steps To Reproduce:

      1. Configure System
        • Mask Passwords - Parameters to automatically mask
          [x] Non-Stored Password Parameter
          [x] Credentials Parameter
          [x] Password Parameter
        • Mask Passwords - Global name/password pairs
          None added.
          I already have several "Username with password" Global credentials
      2. Create freestyle project
        • [x] Mask passwords (and enable global passwords)
          Responce: Password Parameters, or any other type of build parameters selected for masking in Hudson's/Jenkins' main configuration screen (Manage Hudson > Configure System), will be automatically masked.
        • [x] Use secret text(s) or file(s)
          Add: Username and password
          Variable: oracleCredential
          (*) Specific credentials
          my_oracle_username/***** (Oracle remote login)
          parameter expression: ${oracleCredential}
        • Add build step: Execute Windows batch command
          Command: @echo %oracleCredential%
        • [Save]
      3. Build Now, and examine Console Output
        Expected: ********** is displayed in place of %oracleCredential%
        Actual: Actual username:password value of %oracleCredential% is displayed.


        Issue Links


            marshall Marshall GSEIT created issue -
            danielbeck Daniel Beck made changes -
            Field Original Value New Value
            Issue Type Bug [ 1 ] New Feature [ 2 ]
            Labels credentials, jenkins, mask-passwords plugin, security,
            rtyler R. Tyler Croy made changes -
            Workflow JNJira [ 159712 ] JNJira + In-Review [ 180092 ]
            oleg_nenashev Oleg Nenashev made changes -
            Assignee Daniel Petisme [ danielpetisme ] Oleg Nenashev [ oleg_nenashev ]
            oleg_nenashev Oleg Nenashev made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            oleg_nenashev Oleg Nenashev made changes -
            Status In Progress [ 3 ] In Review [ 10005 ]
            oleg_nenashev Oleg Nenashev made changes -
            Resolution Fixed [ 1 ]
            Status In Review [ 10005 ] Resolved [ 5 ]
            jamesdumay James Dumay made changes -
            Remote Link This issue links to "CloudBees Internal OSS-2111 (Web Link)" [ 18416 ]


              oleg_nenashev Oleg Nenashev
              marshall Marshall GSEIT
              7 Vote for this issue
              11 Start watching this issue