[JIRA] (JENKINS-56466) Bitbucket key is unmasked in logs

2019-03-12 Thread ja...@howeswho.co.uk (JIRA) 
Title: Message Title


 
 
 
 

 
 
 

 
   
 James Howe updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Jenkins /  JENKINS-56466  
 
 
  Bitbucket key is unmasked in logs   
 

  
 
 
 
 

 
Change By: 
 James Howe  
 
 
Priority: 
 Minor Major  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[JIRA] (JENKINS-56466) Bitbucket key is unmasked in logs

2019-03-07 Thread ja...@howeswho.co.uk (JIRA) 
Title: Message Title


 
 
 
 

 
 
 

 
   
 James Howe created an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Jenkins /  JENKINS-56466  
 
 
  Bitbucket key is unmasked in logs   
 

  
 
 
 
 

 
Issue Type: 
  Bug  
 
 
Assignee: 
 Antonio Mansilla  
 
 
Components: 
 bitbucket-build-status-notifier-plugin  
 
 
Created: 
 2019-03-07 15:39  
 
 
Environment: 
 Jenkins 2.150.3  Bitbucket Build Status Notifier Plugin 1.4.1  
 
 
Labels: 
 security  
 
 
Priority: 
  Minor  
 
 
Reporter: 
 James Howe  
 

  
 
 
 
 

 
 The plugin logs the secret key in plaintext at INFO org.jenkinsci.plugins.bitbucket.BitbucketBuildStatusHelper sendBuildStatusNotification in both the "This request was sent" and "This response was received" messages.  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment