[tor-bugs] #11545 [Service - trac]: Remote password change in trac.torproject account

[Tor Bug Tracker & Wiki]

#11545: Remote password change in trac.torproject account
--------------------------------+--------------------
     Reporter:  Dedalo          |      Owner:  erinn
         Type:  defect          |     Status:  closed
     Priority:  critical        |  Milestone:
    Component:  Service - trac  |    Version:
   Resolution:  fixed           |   Keywords:
Actual Points:                  |  Parent ID:
       Points:                  |
--------------------------------+--------------------
Changes (by erinn):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 Okay! This is fixed now. I talked to the developer and they gave me some
 more configuration options to prevent this from happening. I have upgraded
 the version of the plugin and added the options they suggested.

 I told the developer that I considered this a critical bug (i.e., it
 should not be possible under any configuration). But I'm closing this for
 now.

 Thanks, Dedalo, for reporting this. :)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/11545#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online