[kmail2] [Bug 315954] New: LDAP password stored in clear text

Michael Reiher redm at gmx.de
Fri Mar 1 13:57:29 GMT 2013


https://bugs.kde.org/show_bug.cgi?id=315954

            Bug ID: 315954
           Summary: LDAP password stored in clear text
    Classification: Unclassified
           Product: kmail2
           Version: 4.9.5
          Platform: Ubuntu Packages
                OS: Linux
            Status: CONFIRMED
          Severity: major
          Priority: NOR
         Component: general
          Assignee: kdepim-bugs at kde.org
          Reporter: redm at gmx.de

I configured an LDAP server to retrieve addressbook entries from a directory. I
added the LDAP server via Composer -> Mail address field -> "Select" -> "Search
Directory Service" -> "Configure LDAP Servers".

In .kde/share/config/kabldaprc I found my password in clear text! This is a
grave security problem and the password should be stored in kwallet.



Reproducible: Always

-- 
You are receiving this mail because:
You are the assignee for the bug.



More information about the Kdepim-bugs mailing list