Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-13818

Bamboo variables containing password are stored in plain text in the Bamboo export and in the database

XMLWordPrintable

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      The variablesDefinition.xml contains the plain text of the variable that contains a password:

        <definition>
   <id>2850837</id>
   <key>mypassword</key>
   <value>AAAA</value>
   <variableType>PLAN</variableType>
   <plan>PROJ-PLAN</plan>
  </definition>

      Also the variable_value in the variable_definition is in plain text

              Unassigned Unassigned
              akhachatryan ArmenA
              Votes:
              2 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: