[JENKINS-56466] Bitbucket key is unmasked in logs

Type: Bug
Resolution: Unresolved
Priority: Major
Component/s: bitbucket-build-status-notifier-plugin
Labels:
- security
Environment:
Jenkins 2.150.3
Bitbucket Build Status Notifier Plugin 1.4.1

Similar Issues:
Powered by SuggestiMate

Show

The plugin logs the secret key in plaintext at INFO org.jenkinsci.plugins.bitbucket.BitbucketBuildStatusHelper sendBuildStatusNotification in both the "This request was sent" and "This response was received" messages.

There are no comments yet on this issue.

Assignee:: Antonio Mansilla

Reporter:: James Howe

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Created:: 2019-03-07 15:39

Updated:: 2019-03-12 15:27

Jenkins

Details

Description

Attachments

Activity

People

Dates