Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-37356

Clear text password in dbconfig.xml

    XMLWordPrintable

Details

    • Suggestion
    • Resolution: Won't Do
    • None
    • None
    • 1
    • 3
    • We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

    Description

      NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.

      Database password and username held in clear text within dbconfig.xml file. JIRA should encrypt or allow integral authentication with database such as using Windows Authentication with MS SQL Server. This helps reduce the surface area for accessing the data.

      Attachments

        Issue Links

          is related to

          Suggestion - JRASERVER-31004 Encrypt database password in dbconfig.xml

          • Closed
          relates to

          Suggestion - JRACLOUD-37356 Clear text password in dbconfig.xml

          • Closed

          Activity

            People

              Unassigned Unassigned
              457085776fa5 Joel Dyer
              Votes:
              3 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: