cancel
Showing results for 
Search instead for 
Did you mean: 
StefanPappalard
Level 7
Status: Delivered
In Blue Prism Decipher IDP v1.2 RabittMQ password is shown in plain text on installing or changing Decipher Licensing Service Setup.

This behavior adds no value to the product but adds the risk to show secret passwords to randomly spying people or when forgetting to post process screenshots for documentations.

Please hide password in RabbitMQ password field.
1 Comment
LukasRamasauska
Level 5
In addition the RabbitMQ user and pwd is stored in plain text in one of the logs of Decipher on server. In location: C:\Users\Public\Blue Prism\SdkService\Logs
The workaround is to switch the logging level to WARN from INFO but that's  a workaround, not a normal solution.

Example:

2022-02-21 12:57:18.9537 [9964-4] INFO | Started.
2022-02-21 12:57:19.0490 [9964-6] INFO | Creating RabbitMQ connection...
2022-02-21 12:57:19.0490 [9964-6] INFO | Creating connection with localhost and trying to authenticate with username guest and password guest...
2022-02-21 12:57:23.3316 [9964-6] WARN | None of the specified endpoints were reachable
2022-02-21 12:57:23.3316 [9964-6] WARN | Could not create SdkService to WebClient connection. Will retry..