You are viewing a plain text version of this content. The canonical link for it is here.
Posted to infrastructure-issues@apache.org by "#asfinfra IRC Bot (JIRA)" <ji...@apache.org> on 2010/11/18 13:30:14 UTC
[jira] Closed: (INFRA-3209) JIRA sends plaintext password in
confirmation email
[ https://issues.apache.org/jira/browse/INFRA-3209?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
#asfinfra IRC Bot closed INFRA-3209.
------------------------------------
Resolution: Fixed
> JIRA sends plaintext password in confirmation email
> ---------------------------------------------------
>
> Key: INFRA-3209
> URL: https://issues.apache.org/jira/browse/INFRA-3209
> Project: Infrastructure
> Issue Type: Improvement
> Security Level: public(Regular issues)
> Components: JIRA
> Reporter: Nick Wellnhofer
> Priority: Minor
>
> When I signed up for Apache JIRA, I was surprised to see that the confirmation email contained the password I had chosen in plaintext. From a security standpoint it's a bad idea to send plaintext passwords by email.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.