Clear text password in dbconfig.xml

XMLWordPrintable

    • Type: Suggestion
    • Resolution: Won't Do
    • None
    • Component/s: None
    • 1
    • 3

      NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.

      Database password and username held in clear text within dbconfig.xml file. JIRA should encrypt or allow integral authentication with database such as using Windows Authentication with MS SQL Server. This helps reduce the surface area for accessing the data.

            Assignee:
            Unassigned
            Reporter:
            Joel Dyer
            Votes:
            3 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved: