-
Suggestion
-
Resolution: Fixed
-
None
Problem Definition
Currently, according to the documentation Integrating Bamboo with LDAP, the LDAP passwords are stored in Bamboo's database table CWD_DIRECTORY_ATTRIBUTE un-encrypted.
Suggested Solution
The existing documentation recommends:
To guarantee its security, you need to ensure that other processes do not have OS-level read permissions for this application's database or configuration files.
For a better protection encrypt the credentials stored in the CWD_DIRECTORY_ATTRIBUTE table.
Workaround
There is no workaround.