Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-16016

Global passwords are visible for matrix configuration builds

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Component/s: envinject-plugin
    • Labels:
      None
    • Environment:
      jenkins core 1.492
      envinject 1.73
    • Similar Issues:

      Description

      I have environment variables defined as 'Global passwords' in matrix job configuration visible with upgrade to envinject 1.73.
      Previously there were links to 'Injected Environment Variables' only for the configurations of matrix project, e.g.:
      $JENKINS_URL/job/$JOBNAME/$BUILD_NUMBER/arch=arch1/injectedEnvVars/?
      With 1.73 update the 'Injected Environment Variables' link appeared for the parent builds, e.g.:
      $JENKINS_URL/job/$JOBNAME/$BUILD_NUMBER/injectedEnvVars/?
      And the environment variables defined as 'Global Passwords' are visible in plain text here.

        Attachments

          Activity

          Hide
          scm_issue_link SCM/JIRA link daemon added a comment -

          Code changed in jenkins
          User: Gregory Boissinot
          Path:
          src/main/java/org/jenkinsci/plugins/envinject/EnvInjectListener.java
          src/test/java/org/jenkinsci/plugins/envinject/EnvInjectPasswordMatrixProjectTest.java
          http://jenkins-ci.org/commit/envinject-plugin/00a86cfc413b4f9b3b26eb8d2bade66d8d3d3941
          Log:
          Fix JENKINS-16016

          Compare: https://github.com/jenkinsci/envinject-plugin/compare/40f6f9cd1782...00a86cfc413b

          Show
          scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Gregory Boissinot Path: src/main/java/org/jenkinsci/plugins/envinject/EnvInjectListener.java src/test/java/org/jenkinsci/plugins/envinject/EnvInjectPasswordMatrixProjectTest.java http://jenkins-ci.org/commit/envinject-plugin/00a86cfc413b4f9b3b26eb8d2bade66d8d3d3941 Log: Fix JENKINS-16016 Compare: https://github.com/jenkinsci/envinject-plugin/compare/40f6f9cd1782...00a86cfc413b

            People

            • Assignee:
              gbois Gregory Boissinot
              Reporter:
              nnau Natalia Naumova
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: