Problem Definition

When updating a setting on the Admin -> Server Settings page, a browser password manager can update the password to connect to Elasticsearch. The password is available on the same page in the Search section.

Once the settings are saved, the connection to Elasticsearch fails and the search feature is not available in Bitbucket Server.

Suggested Solution

Protect the Elasticsearch password against this condition.