Application Registry - Client secret Password2 type
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-16-2022 12:32 AM
Hi,
I would like to know if the field Password2 of Client Secret is visible to Admin role unlock the padlock beside the field.
Thanks in advance
Alex.
- Labels:
-
Vulnerability Response

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-16-2022 12:46 AM
Hi Alex,
No user can see the password even admin. That is how ServiceNow interprets the password field.
But, If your field type is of password2 then you can decrypt with the below code,
var Encrypter = new GlideEncrypter();
var encrypted = current.<your_field name> ;
var decrypted = Encrypter.decrypt(encrypted);
gs.addInfoMessage("encrypted password.. " + encrypted);
gs.addInfoMessage("decrypted password.. " + decrypted);
Mark my answer correct & Helpful, if Applicable.
Thanks,
Sandeep
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-16-2022 11:43 PM

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-16-2022 11:53 PM
That's the expected Behavior!!
You cannot read the "client secret" as an Admin.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-18-2022 12:21 AM