Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-4428

MavenProbeAction exposes password parameters

    XMLWordPrintable

Details

    Description

      Password parameters of Hudson jobs are visible in plain form when the job is
      running. Look to "Monitor Maven Process/Environment Variables" view.

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-19724 Monitor Maven Process - Environment Variables allows user to see unencrypted passwords

          • Major - Major loss of function.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-23447 Sensitive build variables recorded in EnvInjectSavable and displayed in EnvInjectAction

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved
          links to

          Web Link CloudBees Internal OSS-645

          Activity

            Ascending order - Click to sort in descending order
            View 9 older comments
            ahammar Anders Hammar added a comment -

            https://github.com/jenkinsci/maven-plugin/pull/50

            I don't know how to create an IT for this though. Somehow I need to trigger an action during the Maven build and not verify the outcome of a build.

            ahammar Anders Hammar added a comment - https://github.com/jenkinsci/maven-plugin/pull/50 I don't know how to create an IT for this though. Somehow I need to trigger an action during the Maven build and not verify the outcome of a build.
            ahammar Anders Hammar added a comment -

            Ping. Could someone review and merge please?

            ahammar Anders Hammar added a comment - Ping. Could someone review and merge please?
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Anders Hammar
            Path:
            src/main/java/hudson/maven/MavenModuleSetBuild.java
            src/main/java/hudson/maven/MavenProbeAction.java
            http://jenkins-ci.org/commit/maven-plugin/3e970728b46198aa898e507963cc6da27d5ce8cf
            Log:
            [FIXED JENKINS-4428] MavenProbeAction exposes password parameters

            Signed-off-by: Anders Hammar <anders@hammar.net>

            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Anders Hammar Path: src/main/java/hudson/maven/MavenModuleSetBuild.java src/main/java/hudson/maven/MavenProbeAction.java http://jenkins-ci.org/commit/maven-plugin/3e970728b46198aa898e507963cc6da27d5ce8cf Log: [FIXED JENKINS-4428] MavenProbeAction exposes password parameters Signed-off-by: Anders Hammar <anders@hammar.net>
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Olivier Lamy
            Path:
            src/main/java/hudson/maven/MavenModuleSetBuild.java
            src/main/java/hudson/maven/MavenProbeAction.java
            http://jenkins-ci.org/commit/maven-plugin/9c5eb51dda735450a6cc7a59201efe2cd795625a
            Log:
            Merge pull request #50 from andham/JENKINS-4428

            [FIXED JENKINS-4428] MavenProbeAction exposes password parameters

            Compare: https://github.com/jenkinsci/maven-plugin/compare/cc6027c7f38c...9c5eb51dda73

            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Olivier Lamy Path: src/main/java/hudson/maven/MavenModuleSetBuild.java src/main/java/hudson/maven/MavenProbeAction.java http://jenkins-ci.org/commit/maven-plugin/9c5eb51dda735450a6cc7a59201efe2cd795625a Log: Merge pull request #50 from andham/ JENKINS-4428 [FIXED JENKINS-4428] MavenProbeAction exposes password parameters Compare: https://github.com/jenkinsci/maven-plugin/compare/cc6027c7f38c...9c5eb51dda73
            aheritier Arnaud Héritier added a comment -

            Fixed in 2.13

            aheritier Arnaud Héritier added a comment - Fixed in 2.13

            People

              ahammar Anders Hammar
              rtlusty rtlusty
              Votes:
              9 Vote for this issue
              Watchers:
              12 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: