Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-13897

Git password showed as clear text when failing authentication

    XMLWordPrintable

Details

    Description

      We had a git authentication failure on bdog.
      https://bdog.atlassian.net/builds/browse/FUSE-WEBQF-36

      So, the following error message appeared:

      JIRA Fusion - CI JIRA DevStatus Plugin Webdriver Qunit Func Tests › FUSE-WEBQF-36 : Errors getting changes for FUSE-WEBQF-36
(java.lang.RuntimeException : com.atlassian.bamboo.repository.RepositoryException: com.atlassian.bamboo.plugins.git.GitCommandException: command /usr/bin/git ls-remote https://my-user:clear-text-password@bitbucket.org/atlassian/my-repo.git failed with code 128. Working directory was [.]., stderr: [fatal: Authentication failed])

      The password contains a "$", which appears in the clear text as "%24". So, it's pretty dangerous to have the password showed.

      Attachments

        Issue Links

          caused by

          BUILDENG-4200 Loading...

          was cloned as

          BDEV-3699 Loading...

          Activity

            People

              Unassigned Unassigned
              ccalvo Cintia Calvo (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: