Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security: When the Bitbucket plugin is removed from System Console, all the previous values like OAuth Client, Secret, Encryption Key etc should also be removed #26

Open
jfrerich opened this issue May 25, 2021 · 0 comments
Open

Security: When the Bitbucket plugin is removed from System Console, all the previous values like OAuth Client, Secret, Encryption Key etc should also be removed #26

jfrerich opened this issue May 25, 2021 · 0 comments
Labels
Difficulty/3:Hard Hard ticket Help Wanted Community help wanted Needs Mattermost Changes Requires changes to the Mattermost Plugin tookit Type/Task A general task Up For Grabs Ready for help from the community. Removed when someone volunteers

Comments

@jfrerich
Copy link
Contributor

From GH Comment: #5 (review)

4) When the Bitbucket plugin is removed from System Console, all the previous values like OAuth Client, Secret, Encryption Key etc should also be removed

Severity: Moderate

Steps:

  • Login as a sysadmin user and install the bitbucket plugin
  • Visit the bitbucket configuration page and enter all the details and save.
  • Now remove the bitbucket plugin.
  • Install the plugin again and visit the bitbucket configuration page.
  • Notice that the values are still being displayed even after being removed.
@jfrerich jfrerich added the Type/Task A general task label May 26, 2021
@jfrerich jfrerich added this to the v1.1.0 milestone May 26, 2021
@hanzei hanzei removed this from the v1.1.0 milestone Jul 1, 2021
@jfrerich jfrerich added the Needs Mattermost Changes Requires changes to the Mattermost Plugin tookit label Jul 1, 2021
@hanzei hanzei added Help Wanted Community help wanted Up For Grabs Ready for help from the community. Removed when someone volunteers Difficulty/3:Hard Hard ticket labels Mar 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Difficulty/3:Hard Hard ticket Help Wanted Community help wanted Needs Mattermost Changes Requires changes to the Mattermost Plugin tookit Type/Task A general task Up For Grabs Ready for help from the community. Removed when someone volunteers
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@jfrerich @hanzei