Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

immuadmin is not forcing default password change #865

Open
jeroiraz opened this issue Jul 21, 2021 · 1 comment · May be fixed by #969
Open

immuadmin is not forcing default password change #865

jeroiraz opened this issue Jul 21, 2021 · 1 comment · May be fixed by #969

Comments

@jeroiraz
Copy link
Collaborator

@jeroiraz jeroiraz commented Jul 21, 2021

What happened

I was able to successfully login and operate using default credentials

What you expected to happen

After a successful login using default admin credentials immuadmin does request a password change but if confirmation password does not match the newly introduced one, I'd expect to be blocked but it was possible to operate.

How to reproduce it (as minimally and precisely as possible)

Login with default credentials in inmuadmin
Enter mismatching passwords when prompted
User keeps logged in and can operate still with default password

@jespino
Copy link
Contributor

@jespino jespino commented Oct 16, 2021

I going to take a look to this :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

3 participants