Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-12381

Data anonymiser does not blank out SMTP server username and password

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Medium Medium
    • 3.8.1
    • 3.8
    • None

      SMTP server username and password are readable in database/xml export:

      This can possible security leak e.g. when you sent support request, where you send database export to support. Anonymizer does not remove these values.

      Username and password should be encoded format in database.

              chris@atlassian.com Chris Mountford
              7cbccd93ce2e JP Patrikainen
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved: