New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Admin password can be seen when adding person #1139

Closed
jgomer2001 opened this Issue Aug 25, 2018 · 3 comments

Comments

Projects
None yet
3 participants
@jgomer2001
Contributor

jgomer2001 commented Aug 25, 2018

Steps to reproduce in CE 3.1.4

  1. Edit admin profile (any field) and press update
  2. Try addding a new user (email and password are somehow prefilled)
  3. click on the password's eye. It shows the actual admin password

password_shown

@jgomer2001 jgomer2001 added this to the 3.1.4 milestone Aug 25, 2018

@jgomer2001 jgomer2001 added the QA label Aug 25, 2018

@syntrydy

This comment has been minimized.

Contributor

syntrydy commented Aug 27, 2018

Not reproducible

@syntrydy syntrydy closed this Aug 27, 2018

@natt-tester natt-tester reopened this Aug 28, 2018

@natt-tester

This comment has been minimized.

natt-tester commented Aug 28, 2018

@syntrydy, @jgomer2001, I've just reproduced it in the latest build for Ubuntu16. I was able to see the creds when I wanted to add a new first user. I think this is when it's shown because I was unable to reproduce it with at least one user + admin.

@syntrydy

This comment has been minimized.

Contributor

syntrydy commented Aug 30, 2018

this happen when you allow the browser to save admin username and password on the login page

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment