kura
kura copied to clipboard
Console Password Can be One Character Long
If user changes default console password from "admin" to something, there is a "Minimum password length" parameter, that specifies how long should the new password be (the default value is "8"). However, this parameter is ignored, as user can create new password with length of total one character.
Testflow:
- Login to Kura as admin/admin
- Go to WebConsole service and set new password to "1"
- Try to save the changes, logout
- Try to login with the new password - login is successful
Expected behavior "Minimum password length" parameter should not be ignored when creating new password.
Screenshots /
Target Environment (please complete the following information): Board: Raspberry Pi 3 OS version: Linux raspberrypi 4.19.75-v7+ # 1270 SMP Tue Sep 24 18:45:11 BST 2019 armv7l GNU/Linux Kura version: 4.2.0_SNAPSHOT (Link to the specific Kura version -from May 4th 2020)