Password to access InfluxDB is stored unencrypted on disk

XMLWordPrintable

    • Type: Improvement
    • Resolution: Fixed
    • Priority: Minor
    • Component/s: influxdb-plugin
    • None
    • Environment:
      Version 1.20.4, Jenkins 2.170
    • 1.22

      When configuring the plugin on "Configure System", the username and password are typed directly in a field - see attached screen shot.

      When saving, the user/password to access InfluxDB are saved in jenkinsci.plugins.influxdb.InfluxDbPublisher.xml unencrypted.

      This plugin should make use of Jenkins credentials, and have a dropbox here to select the correct username/password credentials.

      This is a security issue in my opinion and needs to be fixed ASAP.
      Thanks.

            Assignee:
            Aleksi Simell
            Reporter:
            Michel Zanini
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: