Release Notes › Policy Server Release Notes › Defects Fixed in SiteMinder Releases › Defects Fixed for 6.0 SP5 › Incorrect Password Accepted for Password Change Request (65110,66730)

Incorrect Password Accepted for Password Change Request (65110,66730)

Symptom:

When Active Directory user accounts were set to the "change password at next login" state, incorrect passwords were accepted during authentication and the users were redirected to change their password. The same incorrect password could be used for the password change request. As a result, the password was changed and access to the protected resources was granted.

Solution:

This is no longer an issue.

Onyx Issue: 12141