Jenkins “j_spring_security_check” login interface has the risk of leaking username and password. Is there any way to solve it? [image]

[image] Jenkins Security Question Using Jenkins As long as you use https for your Jenkins there should be no risk that username/password are leaked. If you run without https then anyone that is able to read the network traffic can find out the password. Jenkins behaves he…

[image] Jenkins Security Question Using Jenkins What specifically is your concern here? Username and password must be sent to the site to log you in. I hope that when logging in, the interface will not expose the user name and password. At least the username and passw…

As long as you use https for your Jenkins there should be no risk that username/password are leaked. If you run without https then anyone that is able to read the network traffic can find out the password. Jenkins behaves here no different than other sites that ask for username and password.

Jenkins Security Question

Using Jenkins

danielbeck (Daniel Beck) July 2, 2024, 8:16am 2

What specifically is your concern here? Username and password must be sent to the site to log you in.

Topic		Replies	Views
Password transmitted in plain text Ask a question	5	757	January 9, 2023
Encrypted HTML login forms Using Jenkins question	2	554	November 3, 2022
Encrypt or hide password from Jenkins.xml file: --httpsKeyStorePassword Community question	2	573	May 7, 2024
Prevent developers from stealing jenkins credentials Using Jenkins sig-security	8	5585	June 10, 2023
Jenkins compromised Ask a question	1	909	June 17, 2022

Jenkins Security Question

Related topics