Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-14497

CVS module stores passwords in clrear text

    XMLWordPrintable

Details

    • Bug
    • Resolution: Duplicate
    • Medium
    • None
    • None
    • None
    • None

    Description

      It is enough to run the following SQL queries to find out what is the password for the connection to a repository.

      select vc.vcsname, ps.id, pe.property_key, ps.propertyvalue from propertystring ps, propertyentry pe, versioncontrol vc where pe.id = ps.id and  pe.entity_id = vc.id and pe.property_key = 'cvspassword';
      vcsname   |  id   | property_key | propertyvalue 
      -------------+-------+--------------+---------------
       mod1 | 10055 | cvspassword  | pass1
       mod2        | 10065 | cvspassword  | mypass
      (2 rows)
      

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              bdziedzic Bogdan Dziedzic [Atlassian]
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: