Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-8774

CIFS-Publisher prints password in cleartext in log and settings file

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Major Major
    • cifs-plugin
    • None
    • Hudson 1.395
      CIFS-Publisher Plugin 1.1.12
      Windows XP SP3 Host

      See HUDSON-8720 for the original issue before the move to Jenkins.

      The password for the share appears in cleartext in hudson.out.log (I believe it happens when saving the system configuration) and in com.slide.hudson.plugins.CIFSPublisher.xml.

      The password should never be stored/displayed or it should be stored encrypted or as a hash.

            slide_o_mix Alex Earl
            dvader Darth Vader
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved: