WhereYouGo
WhereYouGo copied to clipboard
cgeo
Readable password in settings
Describe your problem!
User password is revealed as plaintext to anyone who opens WhereYouGo application settings.
How to reproduce?
- Run WhereYouGo
- Open Settings > Login credentials
- Click on Password
Actual result after these steps?
Plaintext password shown
Expected result after these steps?
Password field showing only masking characters ( • or * )
Reproducible
Yes
WhereYouGo Version
2022.01.02
System information
No response
Additional Information
Passwords sould not be readable as plaintext anywhere in the GUI (as a basic security measure), when Check login data functionality works, there is no need to have user password visible. This may be security issue for WYG players with extended access to another Groundspeak services.
