Database Password shown in the plain text in the View Submitted Tasks

Products

• CA Identity Suite

Issue/Introduction

We have found the issue in the Identity Manager - View Submitted Tasks.

Attribute -Screen Logical attribute  - |VALUE| the value of the attribute is shown in plain text.

In the Admin Tasks definition, Style is set as Password.

 

Environment

Release : 14.4

Cause

If the "field to match against" is not set to point to any User store attribute - Screen Logical attribute will have no settings like sensitive and encrypted.,

Resolution

Setting "field to match against" to point to an Attribute that is sensitive ensures two things:

Value of Screen Logical Attribute is treated as the value of attribute it matches against - so at least sensitive in your example/ sensitive encrypted in mine below.

This ensures that if the original attribute is at least sensitive value won't be visible in VST. 

 

Password and confirm password are checked if they are the same value.

 

String001 is Sensitive and encrypted

Configmstring001 value is shown on the task screen because Style is Text, not Password.