-
Suggestion
-
Resolution: Won't Do
-
None
-
None
-
1
-
3
-
NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.
Database password and username held in clear text within dbconfig.xml file. JIRA should encrypt or allow integral authentication with database such as using Windows Authentication with MS SQL Server. This helps reduce the surface area for accessing the data.
- is related to
-
JRASERVER-31004 Encrypt database password in dbconfig.xml
- Closed
- relates to
-
JRACLOUD-37356 Clear text password in dbconfig.xml
- Closed