Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-21798

The old password is not verified during password change.

    XMLWordPrintable

Details

    • Incident report
    • Status: Confirmed
    • Trivial
    • Resolution: Unresolved
    • 5.0.28, 6.0.9
    • None
    • None
    • None

    Description

      Steps to reproduce:

      1. User changes it's password.

      Result:
      Only new password is required.
      Expected:
      Old password should be verified as there is risk other people open the zabbix web with remembered session. 

      If the old password is not verified, the user account may be stolen.

      Attachments

        Activity

          People

            zabbix.dev Zabbix Development Team
            onlybee biyurong
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: