Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

When editing SNMP v3 passwords, previous setting is not obfuscated #3484

Closed
bmfmancini opened this issue Apr 21, 2020 · 3 comments
Closed

When editing SNMP v3 passwords, previous setting is not obfuscated #3484

bmfmancini opened this issue Apr 21, 2020 · 3 comments
Labels
bug Undesired behaviour confirmed Bug is confirm by dev team resolved A fixed issue
Milestone

Comments

@bmfmancini
Copy link
Member

Hello

I noticed that in the device default page the priv passphrase does not block out the password

image

Even after you save the form the password is not obfuscated

@bmfmancini bmfmancini added bug Undesired behaviour unverified Some days we don't have a clue labels Apr 21, 2020
@TheWitness
Copy link
Member

Yea, that was by design. I've wondering if we do need to obfuscate it.

@TheWitness
Copy link
Member

Maybe only show it when you first create it, then don't show it on subsequent edits...

@bmfmancini
Copy link
Member Author

Yea I think it should be uniform maybe show the credentials in clear until you hit submit
This will make security teams happy

@TheWitness TheWitness removed the unverified Some days we don't have a clue label Apr 23, 2020
TheWitness added a commit that referenced this issue Apr 24, 2020
* 1.2.11 shows snmpv3 password is not obfuscated in device defaults screen
* In automation, when viewing an 'SNMP option set', the private passphrase is in clear
@TheWitness TheWitness added the resolved A fixed issue label Apr 24, 2020
@TheWitness TheWitness added this to the 1.2.12 milestone Apr 24, 2020
@netniV netniV added the confirmed Bug is confirm by dev team label Apr 26, 2020
@netniV netniV changed the title [Security] 1.2.11 shows snmpv3 password is not obfuscated in device defaults screen When editing SNMP v3 passwords, previous setting is not obfuscated May 3, 2020
@github-actions github-actions bot locked and limited conversation to collaborators Aug 2, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
bug Undesired behaviour confirmed Bug is confirm by dev team resolved A fixed issue
Projects
None yet
Development

No branches or pull requests

3 participants