[FINERACT-516] Add current password field to prevent unauthorized users from changing password of the current user #2428

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: User Management
• Labels: Roadmap2022 gsoc p2
• External issue URL: https://github.com/openMF/community-app/issues/2428
• Assignee: Unassigned
• Reporter: Santosh Math
• Created: 28/Aug/17 05:42
• Updated: 30/Oct/22 13:54

Description

Reported by Nenge1

Link,
Mifos dropdown->profile>change password (check the screenshot)

Allowing user to enter only new password increase vulnerability because the username is visible.