[Tickets #13536] Password ending on a number weaker

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://bugs.horde.org/ticket/13536
------------------------------------------------------------------------------
  Ticket             | 13536
  Created By         | bart.folkers at student.hku.nl
  Summary            | Password ending on a number weaker
  Queue              | Passwd
  Version            | FRAMEWORK_5_1
  Type               | Bug
  State              | Unconfirmed
  Priority           | 3. High
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


bart.folkers at student.hku.nl (2014-09-02 22:18) wrote:

It appears that I don't need to fill in my full password when I want  
to log onto Horde4 (5.1.3). Example:
password = example1234
fill in 'example' as login credentials, and you're in.

I don't know much of this stuff, but I wanted to share this, because I  
think this is a bug with potentially high security-risks.