Search Issue Tracker
Fixed in 1.1.3
Votes
0
Found in [Package]
2019.3.0b1
Issue ID
1178843
Regression
No
[UDP] Sandbox test account passwords are displayed and transmitted in plain text
[UDP] Sandbox test account passwords are displayed and transmitted in plain text
After install and configuring the UDP package, the user will be able to add Sandbox Test Accounts via the UDP Settings asset. Currently when configuring a Sandbox Test Account, the test account's password will be displayed and transmitted in plain-text.
Steps to reproduce:
- In Unity 2019.3, create a new project and nstall the Universal Distribution Portal (UDP) package (alternatively download the attached project)
- Menu: Window > Universal Distribution Portal > Settings
-Inspector (UDP Settings) > Register the project with Unity Cloud Services if the UDP Settings Inspector pane indicates it is not already
- Inspector (UDP Settings) > UDP Sandbox Test Accounts > Add new test account
- Observe when entering a password, the password is displayed in plain text
- (Optional) with a packet sniffer attached, push the Sandbox Test Accounts observing the data is transmitted in a plain-text field (aside from TLS) -- should this be a hash?
Add comment
All about bugs
View bugs we have successfully reproduced, and vote for the bugs you want to see fixed most urgently.
Latest issues
- Unity CIL Linker fails on Player build when persistent listeners have "<" and ">" in their XML attribute names
- ”Lighting data asset ‘LightingData’ is incompatible with the current Unity version…” warnings are thrown when saving Indoors (URP) and Outdoors (URP) Scenes as Scene Templates
- [iOS] The screen blinks when transitioning from custom to Unity splash screen
- [macOS] ”Ignoring depth surface load action as it is memoryless” warnings are thrown when taking Game View Snapshot
- UI Builder Inspector scrolls back up when changes on an expanded but not fully displayed Inspector tab are saved
Resolution Note (fix version 1.1.3):
Could not reproduce in latest package 1.1.3.7 (preview). Closing as fixed.