tracker issue : CF-3486707

select a category, or use search below
(searches all categories and all time range)
Title:

[ANeff] Bug for: Admin API's login() treats ishashed=false as ishashed=true

| View in Tracker

Status/Resolution/Reason: Closed/Fixed/

Reporter/Name(from Bugbase): Aaron Neff / Aaron Neff (Aaron Neff)

Created: 01/22/2013

Components: Administrator, Admin API

Versions: 10.0

Failure Type:

Found In Build/Fixed In Build: Final /

Priority/Frequency: Minor / Very few users will encounter

Locale/System: English / Windows 7 SP1 64-bit

Vote Count: 0

Listed in the version 2016.0.0.297996 Issues Fixed doc
Verification notes: verified_fixed on July 22, 2017 using build 2016.0.01.298513 
Admin API's login() treats ishashed=false as ishashed=true.

Repro: Replace "mypassword" w/ the Administrator password. Run the code. Access that URL.

http://localhost/CFIDE/adminapi/administrator.cfc?method=login&returnformat=json&ishashed=false&adminpassword=<cfoutput>#hash("mypassword", "SHA-1")#</cfoutput>

Actual Result: The login() method returns: true

Expected Result: The login() method should return: false

Tested on CF10 w/ Update 7.

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	3486707

External Customer Info:
External Company:  
External Customer Name: itisdesign
External Customer Email:

Attachments:

Comments:

@Aaron Hey can you verify this on the latest update? I am getting "false" -Viny (Comment added from ex-user id:vnigam)
Comment by Adobe D.
16712 | June 20, 2013 02:17:21 AM GMT
Hi Viny, Splendor Public Beta still returns "true" for me. Steps to Reproduce: 1) In CF Admin, set password as "password". Then logout. 2) In browser, go to: http://localhost/CFIDE/adminapi/administrator.cfc?method=login&returnformat=json&ishashed=false&adminpassword=5BAA61E4C9B93F3F0682250B6CF8331B7EE68FD8 3) See output is "true". Note: hash("password", "SHA-1") returns 5BAA61E4C9B93F3F0682250B6CF8331B7EE68FD8 Thanks!, -Aaron
Comment by External U.
16713 | February 28, 2014 12:14:07 AM GMT
ishashed functionality works properly. Fix verified in ColdFusion Build #294196 (Comment added from ex-user id:duttswam)
Comment by Adobe D.
16714 | June 16, 2015 03:54:38 AM GMT
Verified this is fixed in CF2016 Update 1 (build 2016.0.01.298513). Thanks!, -Aaron
Comment by Aaron N.
16715 | July 22, 2017 11:28:08 PM GMT