2267: Site Configurations displaying mail password in plain text

r**@archit****** (Google Code) (Is this you? Claim this profile.)
Jan. 29, 2014
What version are you running?
1.5.6

What's the URL of the page containing the problem?
/admin/db/siteconfig/siteconfiguration/1

What steps will reproduce the problem?
1. View the Site Configuration.
2.
3.

What is the expected output? What do you see instead?
I expect not to see the Mail Password, or to see that it is there, but not displayed in plain text.

What operating system are you using? What browser?
Server is running in Ubuntu, and I am using Chrome as the browser


Please provide any additional information below.
#1 zel***@gmai***** (Google Code) (Is this you? Claim this profile.)
This is pretty bad.  Passwords should never be stored in cleartext -- even in a database.
david
#2 david
  • +Component-Admin
david
#3 david
  • +WontFix
#4 mayur.******@gmai***** (Google Code) (Is this you? Claim this profile.)
Hi,
I found that repository "passwords' are stored as clear text in mysql.
table name is scmtools_repository