Password complexity checks are ignored when using 'Forgot your Password' feature

  • 7016724
  • 03-Aug-2015
  • 03-Aug-2015

Environment

Novell Vibe 4.0

Situation

With the Password Complexity Checks enabled on a Vibe 4.0 site, if a user tries to use the 'Forgot your Password' feature to reset the password, the new password is not checked against the password complexity checks allowing the end user to select a password that does not follow the site's password complexity checks.

Resolution

A fix for this issue is available in the Vibe 4.0 Hot Patch 3, available via the Novell Patch Finder.