View Issue Details

This bug affects 1 person(s).
 256
IDProjectCategoryView StatusLast Update
12603Bug reportsSecuritypublic2019-11-11 18:22
Reporterollehar Assigned Todominikvitt 
PrioritynoneSeveritypartial_block 
Status closedResolutionfixed 
Product Version2.67.x 
Target Version4.0.0devFixed in Version4.0.0-beta 
Summary12603: Setting emailsmtppassword is saved as clear text
Description

As title. Should be two-way hash with secret.

Same for setting bounceaccountpass.

TagsNo tags attached.
Bug heat256
Complete LimeSurvey version number (& build)latest
I will donate to the project if issue is resolvedNo
Browser
Database type & version-
Server OS (if known)-
Webserver software & version (if known)-
PHP Version-

Relationships

related to 10987 assignedDenisChenu Feature requests Plugin settings of type "password" are stored in plain text 
related to 14542 new Feature requests Allow to save some password in config.php file (SMTP/IMAP …) 
related to 14621 new Feature requests Hardening PHP during installation 

Users monitoring this issue

There are no users monitoring this issue.

Activities

LouisGac

LouisGac

2018-05-23 11:53

developer   ~47762

olle, can you confirm we changed that in LS3?

ollehar

ollehar

2018-05-23 11:58

administrator   ~47764

Last edited: 2018-05-23 11:58

AFAIK, no dev has been done on this. I could be wrong. Ask in chat?

dominikvitt

dominikvitt

2019-06-12 15:12

developer   ~52365

This issue is fixed.

https://github.com/LimeSurvey/LimeSurvey/commit/fdc3241d9d65feccbec5ce3c100b40bbb1aad8ef

ollehar

ollehar

2019-06-12 15:29

administrator   ~52366

Hooray!

Issue History

Date Modified Username Field Change
2017-08-17 11:39 ollehar New Issue
2017-08-17 11:57 ollehar Description Updated
2017-08-23 12:47 DenisChenu Relationship added related to 10987
2018-05-23 11:53 LouisGac Assigned To => LouisGac
2018-05-23 11:53 LouisGac Status new => feedback
2018-05-23 11:53 LouisGac Note Added: 47762
2018-05-23 11:58 ollehar Note Added: 47764
2018-05-23 11:58 ollehar Status feedback => assigned
2018-05-23 11:58 ollehar Note Edited: 47764
2018-05-23 12:52 LouisGac Assigned To LouisGac => ollehar
2018-05-23 12:52 LouisGac Target Version => 4.0.0dev
2019-03-12 15:35 DenisChenu Relationship added related to 14621
2019-03-12 15:36 DenisChenu Relationship added related to 14542
2019-03-12 17:11 dominikvitt Assigned To ollehar => dominikvitt
2019-06-12 15:12 dominikvitt Status assigned => resolved
2019-06-12 15:12 dominikvitt Resolution open => fixed
2019-06-12 15:12 dominikvitt Fixed in Version => 4.0.0-beta
2019-06-12 15:12 dominikvitt Note Added: 52365
2019-06-12 15:29 ollehar Note Added: 52366
2019-11-11 18:22 c_schmitz Status resolved => closed