View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0004198 | mantisbt | security | public | 2004-06-28 10:29 | 2006-10-09 11:55 |
| Reporter | thraxisp | Assigned To | thraxisp | ||
| Priority | normal | Severity | tweak | Reproducibility | always |
| Status | closed | Resolution | fixed | ||
| Platform | X86 | OS | Windows | OS Version | Win2K |
| Summary | 0004198: Realname can duplicate a username | ||||
| Description | A user can pick a "realname" that duplicates an existing "username". Username is a unique field, but there is no checking / enforcement on the realname field. This a malicious user can chose a realname that replicates someone elses username (e.g., administrator) and pose as them. | ||||
| Tags | No tags attached. | ||||