View Issue Details

IDProjectCategoryView StatusLast Update
0004534mantisbtsecuritypublic2004-12-11 03:02
ReporterRJelinek Assigned Tovboctor  
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionduplicate 
Product Version0.19.0rc1 
Summary0004534: LDAP: Authentication with empty passwort does not fail
Description

When using ldap-authentication, it is possible to login in with an empty password although a password is used for an account. The behaviour is:

Login with correct password -> OK
Login with wrong password -> Fails
Login with empty password -> OK

TagsNo tags attached.

Relationships

duplicate of 0003113 closedvboctor LDAP authentication failure 

Activities

karl

karl

2004-11-25 00:52

reporter   ~0008425

I think this is similar (if not the same) to issue 0003113