Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-10404

password in clear text in HTML of media type settings

    Details

    • Team:
      Team D
    • Sprint:
      Sprint 49 (Feb 2019), Sprint 50 (Mar 2019), Sprint 51 (Apr 2019)
    • Story Points:
      0.5

      Description

      In 3.0 we can set password in media type settings, but it's included as clear text to HTML when we open the media type settings, which is very insecure.

      We had similar case in the past in ZBX-6721 (for ldap_bind password) and we fixed in a way that stored password is not returned to browser, user only may set it again by clicking "Change password" button, which is displayed if password is not set yet.

        Attachments

          Activity

            People

            • Assignee:
              gcalenko Gregory Chalenko
              Reporter:
              zalex_ua Oleksiy Zagorskyi
            • Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: