Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Clear text passwords stored in cwd_directory_attribute - embedded Crowd and Standalone

Peter Meier July 23, 2012

Hi all

I just notiecd that Crowd (embedded version as well as standalone) stores passwords for directories and applications in clear text (table cwd_directory_attribute / ldap.password & application.password). I believe that is a big security issue so I wonder if there is a workaround available or if this is just a matter of configuration?



1 answer

1 vote
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
July 23, 2012

There is an open Crowd issue for this - CWD-1876. However, if the password in the database is encrypted, this still leaves the problem of how to store the master key securely.

Suggest an answer

Log in or Sign up to answer
AUG Leaders

Atlassian Community Events