Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-26831

Mantis password written in plain text in build.xml

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Component/s: mantis-plugin
    • Labels:
    • Environment:
      Jenkins 1.580.2
      mantis-plugin 0.25
    • Similar Issues:

      Description

      After a build which required an interaction with Mantis, one can found the credentials used by mantis-plugin in the file build.xml

          <hudson.plugins.mantis.MantisRegisterAction plugin="mantis@0.25">
            <site>
              <url>http://someserver/mantis/</url>
              <version>V120</version>
              <userName>aaaaa</userName>
              <password>xxxxx</password>
            </site>
            <issueNo>3465</issueNo>
          </hudson.plugins.mantis.MantisRegisterAction>
      

        Attachments

          Activity

          Hide
          scm_issue_link SCM/JIRA link daemon added a comment -

          Code changed in jenkins
          User: Seiji Sogabe
          Path:
          src/main/java/hudson/plugins/mantis/MantisSite.java
          src/main/java/hudson/plugins/mantis/soap/mantis110/MantisSessionImpl.java
          src/main/java/hudson/plugins/mantis/soap/mantis120/MantisSessionImpl.java
          src/main/resources/hudson/plugins/mantis/MantisProjectProperty/global.jelly
          src/test/java/hudson/plugins/mantis/MantisProjectPropertyConfigSubmitTest.java
          src/test/java/hudson/plugins/mantis/MantisSiteTest.java
          http://jenkins-ci.org/commit/mantis-plugin/5cbc6c75d2da51d77b688c416b32a7f54fd88029
          Log:
          [FIXED JENKINS-26831] save secret password

          Show
          scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Seiji Sogabe Path: src/main/java/hudson/plugins/mantis/MantisSite.java src/main/java/hudson/plugins/mantis/soap/mantis110/MantisSessionImpl.java src/main/java/hudson/plugins/mantis/soap/mantis120/MantisSessionImpl.java src/main/resources/hudson/plugins/mantis/MantisProjectProperty/global.jelly src/test/java/hudson/plugins/mantis/MantisProjectPropertyConfigSubmitTest.java src/test/java/hudson/plugins/mantis/MantisSiteTest.java http://jenkins-ci.org/commit/mantis-plugin/5cbc6c75d2da51d77b688c416b32a7f54fd88029 Log: [FIXED JENKINS-26831] save secret password

            People

            Assignee:
            sogabe sogabe
            Reporter:
            benoitandrieu Benoit Andrieu
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: