Administrator should not be able to change password of the Webmaster #402

Closed
opened 2026-10-04 23:56:44 +02:00 by adam · 0 comments
Owner

Hi,

right now a administrator can change the password of the webmaster in the user management interface.
With the changed password and the username he can login to webmaster account and get super-rights.

cheers
Flake

Piwigo version: 2.7.4
PHP version: 5.6.17-3
MySQL version: 5.5.5-10.0.23-MariaDB-2
Piwigo URL: not public

Hi, right now a administrator can change the password of the webmaster in the user management interface. With the changed password and the username he can login to webmaster account and get super-rights. cheers Flake Piwigo version: 2.7.4 PHP version: 5.6.17-3 MySQL version: 5.5.5-10.0.23-MariaDB-2 Piwigo URL: not public <!-- github-sync-id:133211566 -->
adam closed this issue 2026-10-04 23:56:44 +02:00
Sign in to join this conversation.
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#402