[JENKINS-56466] Bitbucket key is unmasked in logs - Jenkins Jira

XML

Word

Printable

Details

Type: Bug
Status: Open (View Workflow)
Priority: Major
Resolution: Unresolved
Component/s: bitbucket-build-status-notifier-plugin
Labels:
- security
Environment:
Jenkins 2.150.3
Bitbucket Build Status Notifier Plugin 1.4.1

Similar Issues:

Show

Description

The plugin logs the secret key in plaintext at INFO org.jenkinsci.plugins.bitbucket.BitbucketBuildStatusHelper sendBuildStatusNotification in both the "This request was sent" and "This response was received" messages.

Attachments

Activity

There are no comments yet on this issue.

People

Assignee:: Antonio Mansilla

Reporter:: James Howe

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 2019-03-07 15:39

Updated:: 2019-03-12 15:27