| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 08930 | Bug reports | Installation | public | 2014-04-02 10:24 | 2014-04-22 21:28 |
| Reporter | DenisChenu | Assigned To | DenisChenu | ||
| Priority | normal | Severity | minor | ||
| Status | closed | Resolution | fixed | ||
| Product Version | 2.05+ | ||||
| Fixed in Version | 2.06+ | ||||
| Summary | 08930: Remove the password in last installation step | ||||
| Description | At the last installation step we have: It's a security issue, and user choose his password write it 2 times). | ||||
| Additional Information | Better to have: | ||||
| Tags | No tags attached. | ||||
| Bug heat | 4 | ||||
| Complete LimeSurvey version number (& build) | 140402 | ||||
| I will donate to the project if issue is resolved | No | ||||
| Browser | not relevant (FF28) | ||||
| Database type & version | not relevant | ||||
| Server OS (if known) | not relevant | ||||
| Webserver software & version (if known) | not relevant | ||||
| PHP Version | not relevant | ||||
| Git branch / Pull Request URL | |||||
 |
I am sorry but I fail to see the security issue. Can you explain a bit more, please? |
 |
Showing a password on screen allow atacker to see password (social risk), and i think we really don't need to show the password. It's really a low security risk, it's why i don't fix it and put a bug report (really quick to fix). |
|
|
2.05+ Build 140422 released. |
