From 8fb1e71b5e5c9973a3eac8fa5606bed559913ebd Mon Sep 17 00:00:00 2001
From: Jan-Hendrik Willms <tleilax+studip@gmail.com>
Date: Tue, 27 Jun 2023 14:23:20 +0000
Subject: [PATCH] fixes #2755
Closes #2755
Merge request studip/studip!1864
---
app/controllers/admin/user.php | 2 ++
1 file changed, 2 insertions(+)
diff --git a/app/controllers/admin/user.php b/app/controllers/admin/user.php
index 960fc50550e..8932f48d8ba 100644
--- a/app/controllers/admin/user.php
+++ b/app/controllers/admin/user.php
@@ -440,6 +440,8 @@ class Admin_UserController extends AuthenticatedController
if (
$GLOBALS['perm']->have_perm('root')
&& Config::get()->ALLOW_ADMIN_USERACCESS
+ && !StudipAuthAbstract::CheckField('auth_user_md5.password', $this->user->auth_plugin)
+ && $this->user->auth_plugin !== null
&& (Request::get('pass_1') !== '' || Request::get('pass_2') !== '')
) {
if (Request::get('pass_1') === Request::get('pass_2')) {
--
GitLab