Uploaded image for project: 'JIRA Components'
  1. JIRA Components
  2. JIRA-24

Password displayed when JQL error trace is shown

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 8.4
    • Fix Version/s: 8.4.1
    • Component/s: Macro
    • Labels:
    • Tests:
      Unit
    • Difficulty:
      Trivial
    • Documentation:
      N/A
    • Documentation in Release Notes:
      N/A
    • Similar issues:

      Description

      When wrong parameters that lead to an invalid JIRA query are used in the JIRA macro, the error displayed shows the user credentials, revealing both the username and the password.

      Compared to the deprecated Secure JIRA macro, the former only shows the username but not the password.

        Attachments

          Activity

            People

            • Assignee:
              vmassol Vincent Massol
              Reporter:
              hector.prieto Héctor
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Date of First Response: