Lack of Password Validation When Changing User Name
Karthick
Staff Posts: 40
Description: In the Profile > Account > User Name > Edit section, if an invalid password is entered and the user clicks Save, a prompt incorrectly indicates that the user name was changed successfully. There is no password validation, which can lead to security issues and incorrect feedback to users.
Steps to Reproduce:
- Navigate to
community.liveperson.com. - Go to Profile > Account > User Name > Edit.
- Enter an invalid password.
- Click the Save button.
- Observe the prompt stating "User Name changed successfully" despite the invalid password.
Expected Behavior: The system should validate the password before changing the user name. If an invalid password is entered, an appropriate error message should be displayed, and the user name should not be changed.
Actual Behavior: The system does not validate the password and incorrectly shows a success prompt even when an invalid password is entered.
1