Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-6175

Passwords sent as clear text in email

    XMLWordPrintable

Details

    Description

      Anyone can reset the password of a user whose ID they know.
      Verified on the test system.

      Attachments

        1. user login after reset.jpg
          139 kB
          Tom Heitbrink

        Issue Links

          duplicates

          Suggestion - JRASERVER-1204 Security and validation of email & passwords

          • Closed
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-16592 New-account creation process fails to mask password in plain-text e-mail sent to new user

          • High - High priority issues
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-18279 EPIC FAIL: new user signups result in plain text email with all login details

          • Low - Low priority issues
          • Closed

          Suggestion - JRASERVER-10600 DON'T SEND PASSWORDS OVER THE INTERNET IN PLAIN TEXT!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

          • Closed
          is related to

          Support Request - Issue that is likely specific to the installation JRASERVER-15122 Encrypt passwords sent from login portlet/page to server.

          • Medium - Medium priority issues
          • Closed
          relates to

          Suggestion - JRASERVER-15916 Check box in signup window

          • Closed

          Activity

            People

              bbaker ɹǝʞɐq pɐɹq
              89bec53256b6 Spencer Proffit
              Votes:
              34 Vote for this issue
              Watchers:
              15 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: