Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Central Management - Framework does not encrypt LDAP Password in the database #144

Closed
ferventcoder opened this issue May 24, 2020 · 1 comment
Closed

Central Management - Framework does not encrypt LDAP Password in the database #144

ferventcoder opened this issue May 24, 2020 · 1 comment
Assignees
@ferventcoder
Labels
5 - Released The area addressed in the ticket has been released in the product and is generally available. Breaking Change Tickets that represent a breaking change and thus a major version bump. CentralManagement Issues affecting Central Management Edition - Business Priority_HIGH Represents high priority tickets - things that must be addressed soon. Security Related to security in some way. Much of what we do is centered around security, this is higher.

Comments

@ferventcoder
Copy link
Member

ferventcoder commented May 24, 2020 •
edited
Loading

It was discovered that LDAP credentials are stored in plaintext in the database by the framework. The best way to fix this was documented in a support ticket found on the framework's support website.

References

Internal Issue
ZenDesk Ticket
@ferventcoder ferventcoder added Security Related to security in some way. Much of what we do is centered around security, this is higher. Priority_HIGH Represents high priority tickets - things that must be addressed soon. Breaking Change Tickets that represent a breaking change and thus a major version bump. 2 - Working Tickets that are currently being worked on. Edition - Business CentralManagement Issues affecting Central Management labels May 24, 2020
@ferventcoder ferventcoder self-assigned this May 24, 2020
@ferventcoder
Copy link
Member Author

This is fixed and will be released with Central Managements v0.2.0. Because this has security implications, we'll update this issue when we release.

@ferventcoder ferventcoder added 4 - Done Issues that have been completed and are ready to be released. and removed 2 - Working Tickets that are currently being worked on. labels May 26, 2020
@ferventcoder ferventcoder added 5 - Released The area addressed in the ticket has been released in the product and is generally available. and removed 4 - Done Issues that have been completed and are ready to be released. labels Jun 18, 2020
@ferventcoder ferventcoder changed the title Central Management - [REDACTED] Central Management - Framework does not encrypt LDAP Password in the database Jun 25, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ferventcoder ferventcoder

Labels
5 - Released The area addressed in the ticket has been released in the product and is generally available. Breaking Change Tickets that represent a breaking change and thus a major version bump. CentralManagement Issues affecting Central Management Edition - Business Priority_HIGH Represents high priority tickets - things that must be addressed soon. Security Related to security in some way. Much of what we do is centered around security, this is higher.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@ferventcoder