Edgewall Software
Modify

Opened 2 years ago

Closed 2 years ago

Last modified 2 years ago

#11543 closed defect (duplicate)

Users can impersonate existing accounts without authentication

Reported by: Christian Boos Owned by:
Priority: high Milestone:
Component: ticket system Version: 1.0.1
Severity: critical Keywords:
Cc:
Release Notes:
API Changes:

Description

If this ticket actually get's created, it would be some kind of proof that this issue reported on trac-hacks.org might be a generic Trac issue. Let's see…

Attachments (0)

Change History (3)

comment:1 Changed 2 years ago by mrenzmann@…

The initial post to open this ticket came from me - sorry for impersonating cboos for that. It was meant to test whether the mentioned issue reported in a ticket on t-h.o is one that only applies there or if it is a generic Trac thing. It appears the latter is the case. To be honest, I did not check if there is already a ticket for that - if so, please accept my apologies for the duplicate.

comment:2 Changed 2 years ago by psuter

Resolution: duplicate
Status: newclosed

There is. Duplicate of #1890.

comment:3 in reply to:  1 Changed 2 years ago by Christian Boos

Replying to mrenzmann@…:

The initial post to open this ticket came from me - sorry for impersonating cboos for that.

No problem (the authenticated one speaking ;-) ).

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The ticket will remain with no owner.
The resolution will be deleted. Next status will be 'reopened'.
to The owner will be changed from (none) to the specified user.

Add Comment


E-mail address and name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.