Details
-
Fix
-
Status: Released (View Workflow)
-
Minor
-
Resolution: Fixed
-
1.12.13, 1.13.4
-
None
Description
Current Situation
- JOE supports authentication with a stored password
- JOE Profile Editor -> FTP/SFTP tab -> Use Password stored with JOE
- This password will be stored encrypted to a configuration file but not decrypted while establishing the connection (Auth error occurs)
Desired Behaviour
- JOE should decrypt an encrypted password
Attachments
Issue Links
- relates to
-
JOE-290 Password Obfuscation Vulnerability (CVE-2020-12712)
- Released