Forum Discussion

Rama16's avatar
Rama16
Contributor
6 years ago

NTLM Authentication - Password is visible (Security Issue)

Hi,   I see password is visible if I use NTLM authentication. It seems like security issue Please advise.   Thanks
REST
Security
SOAP
  • NBorovykh's avatar
    NBorovykh
    6 years ago

    Hello Rama16,

     

    I agree that the password value should be hidden in the request's properties in Navigator as it's hidden in the other panels. I have registered an issue in the internal DB for this.

     

    As for the fact that the password is stored in the project file as-is, it's the expected default behavior. To protect your sensitive data can either encrypt the whole project or selected properties as it's described in this article: https://support.smartbear.com/readyapi/docs/testing/best-practices/secure.html

     

     

Rama16's avatar
Rama16
Contributor

Yes. I do see the password. Also, When I saved the project and I see it xml as well.

NBorovykh's avatar
NBorovykh
Moderator
6 years ago

Hello Rama16,

 

I agree that the password value should be hidden in the request's properties in Navigator as it's hidden in the other panels. I have registered an issue in the internal DB for this.

 

As for the fact that the password is stored in the project file as-is, it's the expected default behavior. To protect your sensitive data can either encrypt the whole project or selected properties as it's described in this article: https://support.smartbear.com/readyapi/docs/testing/best-practices/secure.html

 

 

  • Rama16's avatar
    Rama16
    Contributor
    6 years ago

    Thanks for update. Let me know when this issue is resolved.

     

    -Ram

  • Rama16's avatar
    Rama16
    Contributor
    6 years ago

    Good morning,

     

    Any update on this? Does this issue is resolved?

     

    Thanks,
    Rama

  • Rama16's avatar
    Rama16
    Contributor
    6 years ago

    Good morning NBorovykh,

     

    Any update on this? Does this issue is resolved?

     

    Thanks,
    Rama

    • NBorovykh's avatar
      NBorovykh
      Moderator
      6 years ago

      Hi Rama16,

       

      At the moment, there is no ETA of a fix to this issue, but I'd like to assure you that the Product Team always treats security-related issues as critical and tries to fix them as soon as possible.