Passwords from variables are visible in plaintext in release versioning preview

XMLWordPrintable

      Hey Atlassians!

      You can see the contents of masked variables (the ones with "password" in their key) when you click on "Add variable to version" in release versioning configuration screen for deployment project.

      Steps to reproduce:
      1. Create a global variable with key: "testpassword" and value "abc". Normally, this variable is masked and you can't see the content.
      2. Create a deployment project and click on "Configure project"
      3. Go to "Release versioning"
      4. Click on "Add variable to version"
      5. Choose "testpassword" variable.

      You can see the contents (i.e. password in plaintext) of the variable in the variables browser and also in the preview of release versions.

      This also affects plan variables (not only global variables).

      Cheers!
      Greg

            Assignee:
            Unassigned
            Reporter:
            Grzegorz Dlugoszewski
            Votes:
            9 Vote for this issue
            Watchers:
            12 Start watching this issue

              Created:
              Updated:
              Resolved: