Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-56865

Password to access InfluxDB is stored unencrypted on disk

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Fixed
    • Icon: Minor Minor
    • influxdb-plugin
    • None
    • Version 1.20.4, Jenkins 2.170
    • 1.22

      When configuring the plugin on "Configure System", the username and password are typed directly in a field - see attached screen shot.

      When saving, the user/password to access InfluxDB are saved in jenkinsci.plugins.influxdb.InfluxDbPublisher.xml unencrypted.

      This plugin should make use of Jenkins credentials, and have a dropbox here to select the correct username/password credentials.

      This is a security issue in my opinion and needs to be fixed ASAP.
      Thanks.

            aleksisimell Aleksi Simell
            michelzanini Michel Zanini
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: