Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-16016

Global passwords are visible for matrix configuration builds

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Component/s: envinject-plugin
    • Labels:
      None
    • Environment:
      jenkins core 1.492
      envinject 1.73
    • Similar Issues:

      Description

      I have environment variables defined as 'Global passwords' in matrix job configuration visible with upgrade to envinject 1.73.
      Previously there were links to 'Injected Environment Variables' only for the configurations of matrix project, e.g.:
      $JENKINS_URL/job/$JOBNAME/$BUILD_NUMBER/arch=arch1/injectedEnvVars/?
      With 1.73 update the 'Injected Environment Variables' link appeared for the parent builds, e.g.:
      $JENKINS_URL/job/$JOBNAME/$BUILD_NUMBER/injectedEnvVars/?
      And the environment variables defined as 'Global Passwords' are visible in plain text here.

        Attachments

          Activity

            People

            • Assignee:
              gbois Gregory Boissinot
              Reporter:
              nnau Natalia Naumova
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: