Security issue with local storage in YouTrack Workflow Editor
As you may already know, a security vulnerability was found in the YouTrack Workflow Editor. Here is a detailed overview of what happened.
On March 7, 2017, we discovered a security issue in the YouTrack Workflow Editor. When using your YouTrack credentials or JetBrains Account credentials to submit an exception report from inside the Workflow Editor (anonymous reports would not be affected by this), or authorise the Workflow Editor to connect to your YouTrack instance, the supplied credentials would be stored in the user directory in unencrypted format. While this does not pose an imminent security risk as the user folder is accessible only by the specific user, those that would be able to access this file could see the credentials exposed.
What actions we have taken
Latest version of YouTrack Workflow Editor resolves this issue. It doesn’t store user credentials in the configuration folder any longer. This version will delete the file containing unencrypted data on first execution. From there on it will prompt for credentials on every connection.
What actions you should take
Please update your installation of YouTrack Workflow Editor using the instructions and launch the application.
If you believe that someone may have accessed your local home folder and potentially seen your credentials, we’d recommend changing these.
We are very sorry for any inconvenience that you might have experienced. If you need any further assistance, please contact our Support Engineers.
The Drive to Develop
Subscribe to Blog updates
Thanks, we've got you!
YouTrack Now With Improved Knowledge Base Collaboration
The YouTrack 2023.2 release brings powerful updates to article collaboration in the Knowledge Base, improves the experience of both support teams and customers within helpdesk projects, adds Turkish language support, and supercharges YouTrack’s performance for everyone working with tasks.
Helpdesk Projects Arrive in YouTrack
YouTrack 2023.1 introduces YouTrack Helpdesk, which enables you to streamline your customer support services for both external and internal clients.
YouTrack Roadmap 2023
Our product commitment and aspirations. What we’re working on. Broad goals for 2023 and beyond
Watch the “YouTrack Project Management: Essentials for Getting Started” Online Demo
You’ll get an overview of how to manage your tasks and projects easily, work with your team’s Agile boards, use powerful time tracking, create Gantt charts effectively, and see what’s going on with reports and dashboards.