-
Problem report
-
Resolution: Fixed
-
Blocker
-
5.2.3
-
None
-
Sprint 72 (Jan 2021), Sprint 73 (Feb 2021), Sprint 74 (Mar 2021)
-
0.125
Steps to reproduce:
- You need an old installation with IDs from distributed monitoring or any configid != 1
Result:
CEncryptHelper::updateKey() has "dbConditionInt('configid', [1])" as condition. So the update query to the DB doesn't do anything and session_key will never be set. Resulting in a failing cookie signature validation.
All users will be downgraded to the guest user.
Expected:
"dynamic" configid condition, so session_key will be set if it's empty.
- caused by
-
ZBXNEXT-5965 Zabbix UI and API must not keep any local states like PHP sessionid
- Closed
- is duplicated by
-
ZBX-19108 Problems with a login and permissions in Frontend
- Closed