History | Log In     View a printable version of the current page.  
Issue Details (XML | Word | Printable)

Key: QB-2622
Type: Bug Bug
Status: Closed Closed
Resolution: Won't Fix
Priority: Minor Minor
Assignee: Unassigned
Reporter: Irina Kotlova
Votes: 0
Watchers: 0
Operations

If you were logged in you would be able to see more operations.
QuickBuild

CLONE -Secret variables can be referenced by clear-text variables, exposing the secret values

Created: 11/Jan/16 10:27 PM   Updated: 21/Dec/16 09:17 AM
Component/s: None
Affects Version/s: 5.0.31
Fix Version/s: 5.1.1

Original Estimate: Unknown Remaining Estimate: Unknown Time Spent: Unknown


 Description  « Hide
When a clear-text variable references a secret variable, then anywhere that the clear-text variable gets referenced will show the secret value in clear text--for example, the Variables list for a build, the build log, etc. An example:

1) Define a secret variable, mySecretVar, and set it to "mysecret"
2) Define a clear text variable, myClearVar, and set it to "${vars.getValue("mySecretVar")}
3) After a build, myClearVar will show up in the Variables tab with its value in clear text, and possibly also in the build log depending on how it is used.

 All   Comments   Work Log   Change History      Sort Order:
Change by Robin Shen [21/Dec/16 09:17 AM]
Field Original Value New Value
Status Open [ 1 ] Closed [ 6 ]
Resolution Won't Fix [ 2 ]