kura icon indicating copy to clipboard operation
kura copied to clipboard

Console Password Can be One Character Long

Open LeoNerdoG opened this issue 4 years ago • 0 comments

If user changes default console password from "admin" to something, there is a "Minimum password length" parameter, that specifies how long should the new password be (the default value is "8"). However, this parameter is ignored, as user can create new password with length of total one character.

Testflow:

  1. Login to Kura as admin/admin
  2. Go to WebConsole service and set new password to "1"
  3. Try to save the changes, logout
  4. Try to login with the new password - login is successful

Expected behavior "Minimum password length" parameter should not be ignored when creating new password.

Screenshots /

Target Environment (please complete the following information): Board: Raspberry Pi 3 OS version: Linux raspberrypi 4.19.75-v7+ # 1270 SMP Tue Sep 24 18:45:11 BST 2019 armv7l GNU/Linux Kura version: 4.2.0_SNAPSHOT (Link to the specific Kura version -from May 4th 2020)

LeoNerdoG avatar May 06 '20 05:05 LeoNerdoG