Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-13806

Passwords from variables are visible in plaintext in release versioning preview

    XMLWordPrintable

Details

    Description

      Hey Atlassians!

      You can see the contents of masked variables (the ones with "password" in their key) when you click on "Add variable to version" in release versioning configuration screen for deployment project.

      Steps to reproduce:
      1. Create a global variable with key: "testpassword" and value "abc". Normally, this variable is masked and you can't see the content.
      2. Create a deployment project and click on "Configure project"
      3. Go to "Release versioning"
      4. Click on "Add variable to version"
      5. Choose "testpassword" variable.

      You can see the contents (i.e. password in plaintext) of the variable in the variables browser and also in the preview of release versions.

      This also affects plan variables (not only global variables).

      Cheers!
      Greg

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              585d5af8444b Grzegorz Dlugoszewski
              Votes:
              9 Vote for this issue
              Watchers:
              12 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: