Bug 1018747

Summary:	dtgov.properties - passwords stored in plaintext
Product:	[JBoss] JBoss Fuse Service Works 6	Reporter:	ppecka <ppecka>
Component:	DT Governance	Assignee:	Eric Wittmann <eric.wittmann>
Status:	CLOSED DUPLICATE	QA Contact:	Jiri Sedlacek <jsedlace>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	6.0.0	CC:	atangrin, ldimaggi, oskutka, soa-p-jira
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-10-15 01:16:37 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description ppecka 2013-10-14 11:07:22 UTC

Description of problem:
Using installer I was able to find DTGov password stored as PLAINTEXT in ../standalone/configuration/dtgov.properties, ../dtgov-sramp-repo-seed-cli-commands.txt, ../standalone/configuration/overlord-idp-users.properties

Version-Release number of selected component (if applicable):
soa-6.0.0-ER4-3


Steps to Reproduce:
1. java -jar jboss-eap-6.0.0.fsw.ci-installer.jar
2. grep -rli "<PASSWORDPROVIDED>" ./jboss-eap-6.1


Actual results:
../dtgov-sramp-repo-seed-cli-commands.txt:connect http://localhost:8080/s-ramp-server admin <PASSWORDPROVIDED>
../standalone/configuration/dtgov.properties:sramp.repo.password<PASSWORDPROVIDED>
../standalone/configuration/dtgov.properties:governance.bpm.password=<PASSWORDPROVIDED>
../standalone/configuration/dtgov.properties:governance.password=<PASSWORDPROVIDED>
../standalone/configuration/overlord-idp-users.properties:admin=<PASSWORDPROVIDED>


Expected results:


Additional info:

Comment 1 Len DiMaggio 2013-10-15 01:16:37 UTC


*** This bug has been marked as a duplicate of bug 991557 ***