Page 1 of 1
Login to website as Admin using any password!
Posted: 29 Apr 2016 17:57
by tjg88
I recently upgraded to 3.0.0.9, when I go to the web page of my system, I can access it as admin with any password! Anyone else seeing this? If so, we need a fix fast!
I changed the password, but it didn't matter, any password still works.
Re: Login to website as Admin using any password!
Posted: 30 Apr 2016 15:17
by Zwabber
Same here........
Re: Login to website as Admin using any password!
Posted: 01 May 2016 21:13
by shawniverson
Woah, that's not good....checking....
Re: Login to website as Admin using any password!
Posted: 01 May 2016 21:15
by shawniverson
Confirmed. Critical bug is present. Dropping everything to fix...keep checking back for info
Re: Login to website as Admin using any password!
Posted: 02 May 2016 17:45
by darky83
New version 3.0.1.0 released upgrade asap.
Re: Login to website as Admin using any password!
Posted: 03 May 2016 01:19
by Steve9R
This only affects people using LDAP Auth though doesnt it ?
Upgrade went straight through and worked fine for me.. cheers.
Re: Login to website as Admin using any password!
Posted: 03 May 2016 11:38
by DaN
This only affects people using LDAP Auth though doesnt it ?
No.
Re: Login to website as Admin using any password!
Posted: 04 May 2016 05:59
by Steve9R
really? I tested on our 3.0.0.9 systems and couldnt login..
Re: Login to website as Admin using any password!
Posted: 04 May 2016 06:27
by DaN
Here is a system without LDAP auth login. I can login to admin account with the "wrong" password.