TDM Web API - Export / Import stores passwords in clear text

Products

• CA Test Data Manager (Data Finder / Grid Tools)

Issue/Introduction

When using the TDM Web API to export or import, the user/account password appears in clear text in the file. Our security policy does not allow any passwords, local, AD/LDAP, or Database accounts, to be clear text when stored in a file or in the database.

 

Environment

Release : 4.9 and 4.10

Component : TDM Web Portal

Resolution

This has been fixed in TDMWeb-4.9.424.0, and TDMWeb-4.10.8.0. After installing the patch, you will need to update the connection profiles for the ones that you want to clear the password in the repository.