nagakula
(Naga)
October 20, 2017, 9:26am
1
hi,
I have a question about using credentials via Credential Asset available in orchestrator.
In the workflow, we were able to print the password or display it by using get credential activity.
My question is by this, the password is accessible and is compromised. could you let me know your views about this?
badita
(Mihai Badita)
October 20, 2017, 11:41am
2
This should became a FAQ.
Please check these:
Hi,
My Development team and I are currently reviewing security considerations around our workflows, and one of the potential issues we have raised is the accessibility of passwords from the Windows Credential Vault using UiPath.
Currently, while UiPath ‘Get Credentials’ can return a password as a ‘SecureString’ from the Vault, this can be converted to ‘String’ with an ‘assign’ activity and some code provided by UiPath in a previous forum post. The password is then easily visible and can be wri…
@badita - One of the user has raised a ticket regarding Security.
Here is the question raised on forum as well from another user.
Could you please help here ?
My Development team and I are currently reviewing security considerations around our workflows, and one of the potential issues we have raised is the accessibility of passwords from the Windows Credential Vault using UiPath.
Currently, while UiPath ‘Get Credentials’ can return a password as a ‘SecureString’ from the Vault, this can be …
1 Like