Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Passwords stored in clear text in MySQL #3180

Closed
writeameer opened this issue Jan 7, 2016 · 4 comments
Closed

Passwords stored in clear text in MySQL #3180

writeameer opened this issue Jan 7, 2016 · 4 comments
Assignees
@ibuildthecloud
Labels
kind/enhancement Issues that improve or augment existing functionality version/1.6
Milestone
v1.6 - Backlog

Comments

@writeameer
Copy link

writeameer commented Jan 7, 2016 •
edited by jira-sync-svc

Hi there,

The settings table appears to store all passwords in the clear. If I try:

select * from setting where name like '%password%'

Account passwords are in the clear:

capture

Can we please encrypt such items ? Thanks.

Ameer Deen.
@kaos
Copy link

kaos commented Jan 7, 2016

Related to #1269

@deniseschannon deniseschannon added the kind/enhancement Issues that improve or augment existing functionality label Jan 11, 2016
@deniseschannon deniseschannon modified the milestone: Release 1.0 Mar 8, 2016
@alena1108 alena1108 mentioned this issue Mar 15, 2016
Closed
@flaccid
Copy link

flaccid commented Mar 15, 2016

Just a bump here - making sure we cover this for GA :)

@deniseschannon deniseschannon modified the milestones: Release 1.0.1, Release 1.1 Apr 7, 2016
@vainkop
Copy link

vainkop commented Jan 10, 2018

The issue is still present in 1.6.10. I was able to retrieve private registry password as plaintext right from mysql db!

@loganhz loganhz modified the milestones: Unscheduled, v1.6 - Future Oct 12, 2018
@deniseschannon
Copy link

With the release of Rancher 2.x, development on v1.6 is very limited.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ibuildthecloud ibuildthecloud

Labels
kind/enhancement Issues that improve or augment existing functionality version/1.6
Projects
None yet
Milestone
v1.6 - Backlog
Development

No branches or pull requests
10 participants
@kaos @flaccid @writeameer @hibooboo2 @prachidamle @ibuildthecloud @will-chan @deniseschannon @loganhz @vainkop