Closed Bug 566157 Opened 14 years ago Closed 14 years ago

password_reset returns success if username does not exist but captcha is correct

Categories

(Cloud Services Graveyard :: Server: Sync, defect)

Product:
Cloud Services Graveyard
Component:
Server: Sync
Platform:
x86
macOS
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 583780

People

(Reporter: mconnor, Assigned: telliott)

Details

From the code, it doesn't seem to check that the user exists.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → DUPLICATE
Product: Cloud Services → Cloud Services Graveyard
You need to log in before you can comment on or make changes to this bug.