Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-12381

Data anonymiser does not blank out SMTP server username and password

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Medium
    • 3.8.1
    • 3.8
    • None

    Description

      SMTP server username and password are readable in database/xml export:

      This can possible security leak e.g. when you sent support request, where you send database export to support. Anonymizer does not remove these values.

      Username and password should be encoded format in database.

      Attachments

        Issue Links

          blocks

          Suggestion - JRASERVER-5226 Encrypt mail passwords in JIRA database

          • Gathering Interest
          relates to

          Suggestion - JRASERVER-12420 Make anonymiser more strict about the translation of values

          • Closed

          Suggestion - JRASERVER-16205 Anonymise data for MailServers

          • Closed

          Activity

            People

              chris@atlassian.com Chris Mountford
              7cbccd93ce2e JP Patrikainen
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: