[JBoss JIRA] (JBIDE-22641) When an Openshift connection is deleted, the secure entries are not removed
by Dmitry Bocharov (JIRA)
[ https://issues.jboss.org/browse/JBIDE-22641?page=com.atlassian.jira.plugi... ]
Dmitry Bocharov reassigned JBIDE-22641:
---------------------------------------
Assignee: Dmitry Bocharov
> When an Openshift connection is deleted, the secure entries are not removed
> ---------------------------------------------------------------------------
>
> Key: JBIDE-22641
> URL: https://issues.jboss.org/browse/JBIDE-22641
> Project: Tools (JBoss Tools)
> Issue Type: Bug
> Components: openshift
> Affects Versions: 4.4.0.Final
> Reporter: Jeff MAURY
> Assignee: Dmitry Bocharov
> Priority: Critical
> Labels: connection, openshift_v3, secure_storage
> Fix For: 4.4.1.AM2
>
>
> When a token or password is saved in secure storage for an Openshift connection, then deleting this connection will not remove this data from secure storage. Then creating a new connection with the same address will reuse this infos. This is a security breach
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
9 years, 8 months
[JBoss JIRA] (JBIDE-22641) When an Openshift connection is deleted, the secure entries are not removed
by Dmitry Bocharov (JIRA)
[ https://issues.jboss.org/browse/JBIDE-22641?page=com.atlassian.jira.plugi... ]
Dmitry Bocharov updated JBIDE-22641:
------------------------------------
Sprint: devex #117 July 2016
> When an Openshift connection is deleted, the secure entries are not removed
> ---------------------------------------------------------------------------
>
> Key: JBIDE-22641
> URL: https://issues.jboss.org/browse/JBIDE-22641
> Project: Tools (JBoss Tools)
> Issue Type: Bug
> Components: openshift
> Affects Versions: 4.4.0.Final
> Reporter: Jeff MAURY
> Assignee: Dmitry Bocharov
> Priority: Critical
> Labels: connection, openshift_v3, secure_storage
> Fix For: 4.4.1.AM2
>
>
> When a token or password is saved in secure storage for an Openshift connection, then deleting this connection will not remove this data from secure storage. Then creating a new connection with the same address will reuse this infos. This is a security breach
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
9 years, 8 months