Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-22603

Authentication/Administration and Authentication/Configuration are visible to anyone

    XMLWordPrintable

Details

    • Unknown
    • N/A
    • N/A

    Description

      It's possible as guest user to get access to Authentication/Administration and Authentication/Configuration, allowing anyone to see information about the authentication mechanism put in place for the wiki, which might be sensitive information.

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-22604 Anyone can change the authenticator of a wiki

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Activity

            People

              tmortagne Thomas Mortagne
              surli Simon Urli
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: