https://bugs.documentfoundation.org/show_bug.cgi?id=96672
Bug ID: 96672
Summary: Outgoing mail server password in clear text inside the
registrymodifications.xcu file
Product: LibreOffice
Version: 4.2.8.2 release
Hardware: x86-64 (AMD64)
OS: Linux (All)
Status: UNCONFIRMED
Severity: normal
Priority: medium
Component: LibreOffice
Assignee: libreoffice-bugs@lists.freedesktop.org
Reporter: michele.marr...@studiostorti.com
Tested on LibreOffice:
Version: 4.2.8.2
Build ID: 420m0(Build:2)
and
Version: 5.0.3.2
Build ID: e5f16313668ac592c1bfb310f4390624e3dbfb75
OS: Ubuntu 14.04
Problem description:
-Navigate to: Tools > Options > LibreOffice Writer > Mail Merge E-mail > Server
authentication
-Enter email information including username and password
-Confirm with Ok
-Go to your user profile (in ubuntu ~/.config/libreoffice/4/user) anyway open
the registrymodifications.xcu file with a text editor
-Inside the file, search for your email password
-There it is, your email password in clear text!
Expected behaviour:
Would expect my email password to be stored encrypted.
I guess is a bug, maybe is the intended behaviour but still is a security
issue.
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
