Eclipse Community Forums: Hudson » Password in Query or Cookie Data

Home » Archived » Hudson » Password in Query or Cookie Data(A password was found in the query string of a GET request or Set-Cookie Header.)

Show: Today's Messages :: Show Polls :: Message Navigator

Password in Query or Cookie Data [message #1691380]

Mon, 06 April 2015 19:49

Queenie Chow

Messages: 1
Registered: April 2015

Junior Member

We recently perform a security scan against our Hudson instance, from the scan report, we are flagged with an high issue for password management: Insecure Submission.

When an user is logging to Hudson, the user password was found in the query string of a GET request or Set-Cookie Header. The recommendation is to ensure that login information is sent with a POST request.

Any chance on fixing that in the future version of Hudson?

Report message to a moderator

Re: Password in Query or Cookie Data [message #1691485 is a reply to message #1691380]

Tue, 07 April 2015 14:49

Denis Roy

Messages: 484
Registered: October 2004
Location: Ottawa, Ontario, Canada

Senior Member

Queenie Chow wrote on Mon, 06 April 2015 15:49

We recently perform a security scan against our Hudson instance, from the scan report, we are flagged with an high issue for password management: Insecure Submission.

When an user is logging to Hudson, the user password was found in the query string of a GET request or Set-Cookie Header. The recommendation is to ensure that login information is sent with a POST request.

Any chance on fixing that in the future version of Hudson?

Thanks for that. can you file this in Bugzilla using the link below:

https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Hudson&component=Core

As soon as you've opened the bug I'll file it as a Security issue.

Denis Roy
Eclipse Webmaster -- webmaster@eclipse.org

Report message to a moderator

Previous Topic:	Hudson 3.2.1 and Maven 3.3.1 with Win7 missing mvn.bat-file
Next Topic:	Ignore failures of some configurations in a matrix project?

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Mon Oct 14 21:10:02 GMT 2024

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter