<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic QVD/QVW files store connection string in plain text! in Archived Groups</title>
    <link>https://community.qlik.com/t5/Archived-Groups/QVD-QVW-files-store-connection-string-in-plain-text/m-p/292207#M3966</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;To keep it short, to remove the password:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;1. affected QVW files must be opened and saved with QV10 SR4, a reload is not needed&lt;/P&gt;&lt;P&gt;2. affected QVD files must be recreated (stored) with QV10 SR4&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;- Ralf&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Mon, 12 Dec 2011 18:57:53 GMT</pubDate>
    <dc:creator>rbecher</dc:creator>
    <dc:date>2011-12-12T18:57:53Z</dc:date>
    <item>
      <title>QVD/QVW files store connection string in plain text!</title>
      <link>https://community.qlik.com/t5/Archived-Groups/QVD-QVW-files-store-connection-string-in-plain-text/m-p/292206#M3965</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi all,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I want to mention this thread which describes a serious security issue:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;A class="jive-link-external-small" href="http://community.qlik.com/message/171643#171643" target="_blank"&gt;http://community.qlik.com/message/171643&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;This is happen at least with QV10 SR3.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I would encourage all of you to update to version 10 SR4.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;- Ralf&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 23 Jul 2025 14:48:52 GMT</pubDate>
      <guid>https://community.qlik.com/t5/Archived-Groups/QVD-QVW-files-store-connection-string-in-plain-text/m-p/292206#M3965</guid>
      <dc:creator>rbecher</dc:creator>
      <dc:date>2025-07-23T14:48:52Z</dc:date>
    </item>
    <item>
      <title>QVD/QVW files store connection string in plain text!</title>
      <link>https://community.qlik.com/t5/Archived-Groups/QVD-QVW-files-store-connection-string-in-plain-text/m-p/292207#M3966</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;To keep it short, to remove the password:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;1. affected QVW files must be opened and saved with QV10 SR4, a reload is not needed&lt;/P&gt;&lt;P&gt;2. affected QVD files must be recreated (stored) with QV10 SR4&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;- Ralf&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 12 Dec 2011 18:57:53 GMT</pubDate>
      <guid>https://community.qlik.com/t5/Archived-Groups/QVD-QVW-files-store-connection-string-in-plain-text/m-p/292207#M3966</guid>
      <dc:creator>rbecher</dc:creator>
      <dc:date>2011-12-12T18:57:53Z</dc:date>
    </item>
    <item>
      <title>QVD/QVW files store connection string in plain text!</title>
      <link>https://community.qlik.com/t5/Archived-Groups/QVD-QVW-files-store-connection-string-in-plain-text/m-p/292208#M3967</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Web file sources (URLs) are also affected!!&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;A class="jive-link-external-small" href="http://community.qlik.com/message/171838#171838"&gt;http://community.qlik.com/message/171838#171838&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;- Ralf&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 14 Dec 2011 09:46:35 GMT</pubDate>
      <guid>https://community.qlik.com/t5/Archived-Groups/QVD-QVW-files-store-connection-string-in-plain-text/m-p/292208#M3967</guid>
      <dc:creator>rbecher</dc:creator>
      <dc:date>2011-12-14T09:46:35Z</dc:date>
    </item>
    <item>
      <title>QVD/QVW files store connection string in plain text!</title>
      <link>https://community.qlik.com/t5/Archived-Groups/QVD-QVW-files-store-connection-string-in-plain-text/m-p/292209#M3968</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Also section access and hidden script is affected!!&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;A class="jive-link-external-small" href="http://community.qlik.com/message/172321#172321"&gt;http://community.qlik.com/message/172321#172321&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;- Ralf&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 14 Dec 2011 12:47:04 GMT</pubDate>
      <guid>https://community.qlik.com/t5/Archived-Groups/QVD-QVW-files-store-connection-string-in-plain-text/m-p/292209#M3968</guid>
      <dc:creator>rbecher</dc:creator>
      <dc:date>2011-12-14T12:47:04Z</dc:date>
    </item>
    <item>
      <title>QVD/QVW files store connection string in plain text!</title>
      <link>https://community.qlik.com/t5/Archived-Groups/QVD-QVW-files-store-connection-string-in-plain-text/m-p/292210#M3969</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;There will be a fix next week:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;A class="jive-link-external-small" href="http://community.qlik.com/message/174787#174787"&gt;http://community.qlik.com/message/174787#174787&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;- Ralf&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 26 Dec 2011 18:25:22 GMT</pubDate>
      <guid>https://community.qlik.com/t5/Archived-Groups/QVD-QVW-files-store-connection-string-in-plain-text/m-p/292210#M3969</guid>
      <dc:creator>rbecher</dc:creator>
      <dc:date>2011-12-26T18:25:22Z</dc:date>
    </item>
  </channel>
</rss>

