https://issues.apache.org/ooo/show_bug.cgi?id=116295

Ariel Constenla-Haile <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |---
     Ever confirmed|0                           |1

--- Comment #3 from Ariel Constenla-Haile <[email protected]> ---
(In reply to Edwin Sharp from comment #2)
> Password is in asterisks.
> 
> Rev. 1516794 Win 7

The report is about the password being saved in the configuration file. This
configuration file is now located in <user profile>/registrymodifications.xcu

Configure the mail merge e-mail.
Shutdown OpenOffice.
Now look into this file registrymodifications.xcu
As this file is all in a single line, it is better to indent it first:

~]$ xmlindent -w ~/.openoffice/4/user/registrymodifications.xcu 
~]$ vim ~/.openoffice/4/user/registrymodifications.xcu 

Search for the following configuration item:

<item oor:path="/org.openoffice.Office.Writer/MailMergeWizard">
  <prop oor:name="MailPassword" oor:op="fuse">
    <value>HERE YOU CAN SEE YOUR PASSWORD</value>
  </prop>
</item>

The password is stored in the configuration file.
This is a security risk.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are watching all bug changes.

Reply via email to