Credential Password and text concatenation - security issue

[LorenzoTacconi]

I noticed that in process/object studio it is possible to concatenate a password obtained with the action "Get Credential" and a text variable. The result is a text variable from which every developer can get the password in clear text. This is a security issue in my opinion that could be solver if the concatenation of a password and a text was of "password" type instead of "text" type.

[AndreyKudinov]

It is impossible to "fix". If process needs to have access to a credentials, then developer doesn't even need to concatenate anything really. You can just read credential to a data item with type "text" OR you can write it to a notepad or any other open field in any application (login instead of password) - lots of options basically.
If your dev should not know the password - just don't give him access to that process/credential on prod.