• Icon: Improvement Improvement
    • Resolution: Fixed
    • Icon: Major Major
    • 4.LATER
    • None
    • None
    • None
    • 1 - Middle term
    • 1 - Easy

      Once connected if admin.xml is missing, and config is ok, we should force the user to set a password for security reason

          [RUNTIME-872] Force admin password to be set

          Could be to ask the password at first connection... or to have a warn if the password of admin is 'admin'

          Raphaël Franchet added a comment - Could be to ask the password at first connection... or to have a warn if the password of admin is 'admin'

          I do not agree, this is still a security issue and it is independant from the linked issue

          Raphaël Franchet added a comment - I do not agree, this is still a security issue and it is independant from the linked issue

            cedric Cédric Damioli
            raphael Raphaël Franchet
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: