Forum Discussion

Rama16's avatar
Rama16
Contributor
6 years ago

NTLM Authentication - Password is visible (Security Issue)

Hi,   I see password is visible if I use NTLM authentication. It seems like security issue Please advise.   Thanks
REST
Security
SOAP
  • NBorovykh's avatar
    NBorovykh
    6 years ago

    Hello Rama16,

     

    I agree that the password value should be hidden in the request's properties in Navigator as it's hidden in the other panels. I have registered an issue in the internal DB for this.

     

    As for the fact that the password is stored in the project file as-is, it's the expected default behavior. To protect your sensitive data can either encrypt the whole project or selected properties as it's described in this article: https://support.smartbear.com/readyapi/docs/testing/best-practices/secure.html

     

     

richie's avatar
richie
Community Hero
6 years ago

Hey Rama16 

 

What version of SoapUI/ReadyAPI! are you using?  I'm running ReadyAPI! v2.6.0 and the password is obfuscated and has been for a while - I remember it wasn't in SoapUI v3.5 - but that was years ago!

 

Cheers,

 

richie

  • Rama16's avatar
    Rama16
    Contributor
    6 years ago

    Thanks for your reply.

     

    I am using ReadyAPI 2.6.0 with Pro licence.

     

    Please see the screenshot.

     

    Thanks

    • TanyaYatskovska's avatar
      TanyaYatskovska
      SmartBear Alumni (Retired)
      6 years ago

      Just to clarify, Rama16, do you see the value of the password field?

      • Rama16's avatar
        Rama16
        Contributor
        6 years ago

        Yes. I do see the password. Also, When I saved the project and I see it xml as well.