Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-28579

Password are shown in plain text checking job config history

    XMLWordPrintable

Details

    • Bug
    • Status: Open (View Workflow)
    • Major
    • Resolution: Unresolved
    • mask-passwords-plugin
    • None
    • Jenkins ver: 1.529
      JobConfigHistory plugin ver: 2.4

    Description

      We use the Mask Password plugin to hide passwords when they are required for the build. This is a requirement in terms of security. The problem is that passwords are shown in plain text checking jobs' config history using JobConfigHistory plugin, so that there is still a way of getting passwords.

      We'd like to have those passwords hidden by using *** or something similar, so that none can see them.

      Attachments

        Activity

          anbeque Angela Beteta created issue -
          danielbeck Daniel Beck made changes -
          Field Original Value New Value
          Component/s mask-passwords-plugin [ 15761 ]
          Component/s jobconfighistory-plugin [ 15683 ]
          Assignee Mirko Friedenhagen [ mfriedenhagen ] Daniel Petisme [ danielpetisme ]
          rtyler R. Tyler Croy made changes -
          Workflow JNJira [ 163425 ] JNJira + In-Review [ 181233 ]

          People

            danielpetisme Daniel Petisme
            anbeque Angela Beteta
            Votes:
            1 Vote for this issue
            Watchers:
            6 Start watching this issue

            Dates

              Created:
              Updated: