[GERONIMO-3543] SQLLoginModule successfully authenticates non-existent users

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.0, 2.0.1, 2.0.2, 2.1
• Fix Version/s: 2.0.3, 2.1
• Component/s: security
• Security Level: public (Regular issues)
• Patch Info: Patch Available
• Regression: Regression
• Assignee: Vamsavardhana Reddy
• Reporter: Jarek Gawor
• Created: 22/Oct/07 04:51
• Updated: 23/Jul/08 20:53
• Resolved: 25/Oct/07 12:02

Description

Authentication succeeds with SQLLoginModule if logging in with an username that does not exist in the database.