Password are shown in plain text checking job config history

XMLWordPrintable

    • Type: Bug
    • Resolution: Unresolved
    • Priority: Major
    • Component/s: mask-passwords-plugin
    • None
    • Environment:
      Jenkins ver: 1.529
      JobConfigHistory plugin ver: 2.4

      We use the Mask Password plugin to hide passwords when they are required for the build. This is a requirement in terms of security. The problem is that passwords are shown in plain text checking jobs' config history using JobConfigHistory plugin, so that there is still a way of getting passwords.

      We'd like to have those passwords hidden by using *** or something similar, so that none can see them.

            Assignee:
            Daniel Petisme
            Reporter:
            Angela Beteta
            Votes:
            1 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated: