Unfortunatelly it seems like real bug.
I think the problem is in RescueSecuritySupport where it should create user object with the hash of the password rather then plain one since this is the only thing Magnolia usually knows about the user password.

The line 102 should look like

            User user = new RescueUser(UserManager.SYSTEM_USER, SecurityUtil.getBCrypt(UserManager.SYSTEM_PSWD));

instead of

            User user = new RescueUser(UserManager.SYSTEM_USER, UserManager.SYSTEM_PSWD);
Change By: Jan Haderka (10/Apr/13 12:33 PM)
Fix Version/s: 4.5.9
Priority: Minor Critical
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira



----------------------------------------------------------------
For list details, see: http://www.magnolia-cms.com/community/mailing-lists.html
Alternatively, use our forums: http://forum.magnolia-cms.com/
To unsubscribe, E-mail to: <[email protected]>
----------------------------------------------------------------

Reply via email to