Actions
Defect #116
closed
svn password in clear text
Status:
Closed
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
Due date:
% Done:
0%
Estimated time:
Resolution:
Affected version:
Description
I have found the svn user password in clear text into the html sourco of the projects settings page
(projects/settings/1).
This password is also in clear text into the mysql database.
This is a very critical security bug. Is possible to manage this password in hashing mode (like the admin password)???
Thank you
Related issues
Updated by
Actions