Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-19830

Masked Password visible as plain text in Msbuild Plugin

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

            • VERY CRITICAL *****

      Masked Password Clearly visible.

      When Pass build variables as properties is marked as true. Global password will be clearly visible in console output. It was found in version 1.20, it was not in version 1.16.

      Please Fix this issue as soon as possible, as it is a security threat for us.

      For reference attaching image. in which global declared password visible clearly with msbuild command.

      but not visible when i echo in windows batch command.

        Attachments

          Issue Links

            Activity

            arpitgold Arpit Nagar created issue -
            arpitgold Arpit Nagar made changes -
            Field Original Value New Value
            Attachment GlobalPassword.PNG [ 24442 ]
            jglick Jesse Glick made changes -
            Status Open [ 1 ] Resolved [ 5 ]
            Resolution Won't Fix [ 2 ]
            jglick Jesse Glick made changes -
            Project Security Issues [ 10180 ] Jenkins [ 10172 ]
            Key SECURITY-94 JENKINS-19830
            Workflow jira [ 151223 ] JNJira [ 151351 ]
            Affects Version/s unspecified [ 10170 ]
            Component/s msbuild [ 15559 ]
            Component/s plugins [ 17329 ]
            jglick Jesse Glick made changes -
            Labels plugin security
            jglick Jesse Glick made changes -
            Resolution Won't Fix [ 2 ]
            Status Resolved [ 5 ] Reopened [ 4 ]
            Assignee Kohsuke Kawaguchi [ kohsuke ] kdsweeney [ kdsweeney ]
            jglick Jesse Glick made changes -
            Status Reopened [ 4 ] Open [ 1 ]
            jglick Jesse Glick made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            gbois Gregory Boissinot made changes -
            Status In Progress [ 3 ] Resolved [ 5 ]
            Resolution Fixed [ 1 ]
            jglick Jesse Glick made changes -
            Resolution Fixed [ 1 ]
            Status Resolved [ 5 ] Reopened [ 4 ]
            jglick Jesse Glick made changes -
            Link This issue is related to JENKINS-20002 [ JENKINS-20002 ]
            gbois Gregory Boissinot made changes -
            Status Reopened [ 4 ] Resolved [ 5 ]
            Resolution Fixed [ 1 ]
            danielbeck Daniel Beck made changes -
            Link This issue is related to JENKINS-19706 [ JENKINS-19706 ]
            rtyler R. Tyler Croy made changes -
            Workflow JNJira [ 151351 ] JNJira + In-Review [ 193836 ]

              People

              • Assignee:
                kdsweeney kdsweeney
                Reporter:
                arpitgold Arpit Nagar
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: