| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 12747 | Bug reports | User / Groups / Roles | public | 2017-10-05 05:50 | 2017-10-25 11:12 |
| Reporter | holch | Assigned To | ollehar | ||
| Priority | none | Severity | partial_block | ||
| Status | closed | Resolution | fixed | ||
| Product Version | 3.0.0-beta.x | ||||
| Fixed in Version | 3.0.0-beta.x | ||||
| Summary | 12747: When trying to change password LS complains about wrong old password | ||||
| Description | I made a fresh installation of the LS 3.0.0-beta3. During the installation I did not notice an option where to change the login and password for the admin (maybe I overlooked this). At the end of the process I got the information that the login details are "admin" and "password", which together with the fact that I seemed not to be able to change this during the installation process seems a security issue to me, because the default values are too obvious and anyone could no. But the main problem is when you try to change the password: I get an error message about the old password being incorrect, but it is never asked during the process. See screenshot. | ||||
| Tags | No tags attached. | ||||
| Bug heat | 4 | ||||
| Complete LimeSurvey version number (& build) | Version 3.0.0-beta.3+170914 | ||||
| I will donate to the project if issue is resolved | No | ||||
| Browser | Chrome | ||||
| Database type & version | NA | ||||
| Server OS (if known) | NA | ||||
| Webserver software & version (if known) | Apache | ||||
| PHP Version | 7 | ||||
 |
I can reproduce on latest develop version. |
 |
Fix committed to develop branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=24036 |
|
|
3.0.0-RC1 Build 171025 released |
