View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0004198 | mantisbt | security | public | 2004-06-28 10:29 | 2006-10-09 11:55 |
Reporter | thraxisp | Assigned To | thraxisp | ||
Priority | normal | Severity | tweak | Reproducibility | always |
Status | closed | Resolution | fixed | ||
Platform | X86 | OS | Windows | OS Version | Win2K |
Summary | 0004198: Realname can duplicate a username | ||||
Description | A user can pick a "realname" that duplicates an existing "username". Username is a unique field, but there is no checking / enforcement on the realname field. This a malicious user can chose a realname that replicates someone elses username (e.g., administrator) and pose as them. | ||||
Tags | No tags attached. | ||||