[JIRA] [mantis-plugin] (JENKINS-26831) Mantis password written in plain text in build.xml

Fri, 06 Feb 2015 05:57:02 -0800
Issue Type: Bug Bug
Assignee: sogabe
Components: mantis-plugin
Created: 06/Feb/15 1:56 PM
Description:

After a build which required an interaction with Mantis, one can found the credentials used by mantis-plugin in the file build.xml

<hudson.plugins.mantis.MantisRegisterAction plugin="[email protected]">
      <site>
        <url>http://someserver/mantis/</url>
        <version>V120</version>
        <userName>aaaaa</userName>
        <password>xxxxx</password>
      </site>
      <issueNo>3465</issueNo>
    </hudson.plugins.mantis.MantisRegisterAction>
Environment: Jenkins 1.580.2
mantis-plugin 0.25
Project: Jenkins
Labels: security
Priority: Major Major
Reporter: Benoit Andrieu
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira

--
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to