Quantcast
Channel: CodeSection,代码区,网络安全 - CodeSec
Viewing all articles
Browse latest Browse all 12749

Security Issue with Connection Manager in SQL Server Integration Services Soluti ...

$
0
0

Today I had to import some data from a password protected Access file into an MS SQL database using SSIS . I am working with SQL Server Data Tools in Visual Studio 2013 . Might be that the issue I am writing about cannot be reproduced by the Visual Studio 2015 version of the tool.

I’ve started to create a new connection via Connection Manager . As I typed in the password as one expect it black dots were displayed instead of the real characters of the password.


Security Issue with Connection Manager in SQL Server Integration Services Soluti ...

It is the same if you switch from the Connection page to the All page of the dialog, where you can see and change all properties of your connection.


Security Issue with Connection Manager in SQL Server Integration Services Soluti ...

However, if you click the OK button to persist the changes in the connection, the password are revealed under the Data connection properties :


Security Issue with Connection Manager in SQL Server Integration Services Soluti ...

I think it should be a bug in the product.

BTW, after you click the OK button in this dialog as well, the password is displayed again masked (this time by asterisk characters instead of the black dots) in the property grid of the connection:


Security Issue with Connection Manager in SQL Server Integration Services Soluti ...

Viewing all articles
Browse latest Browse all 12749

Trending Articles