Jump to content


Photo

Question about Emby Connect password vs local server password

security vulnerability bug

Best Answer Deathly , 23 June 2019 - 05:44 PM

This issue can be closed, I have confirmed that you can sign into a user account user your Emby password as I have changed my Emby connect password and can no longer sign into my user account using my old password

Go to the full post


  • Please log in to reply
2 replies to this topic

#1 Deathly OFFLINE  

Deathly

    Advanced Member

  • Members
  • 177 posts
  • Local time: 11:38 PM

Posted 23 June 2019 - 05:41 PM

So I found a pretty big issue today while signing into Emby. I changed my Emby password yesterday, but when I went to sign on today I accidentally used my old password and my old password STILL WORKED! I am able to sign in with both my old AND new password. I feel like this is a pretty big security flaw. 

 

 

 

While writing this, I'm starting to question whether or not this is a bug. My old Emby user password was the same as my connect password, so are you able to sign into your Emby user account on the web dashboard (this one, specifically: https://memester.cf/...qj90.png)¬†usingyour connect password?



#2 Deathly OFFLINE  

Deathly

    Advanced Member

  • Members
  • 177 posts
  • Local time: 11:38 PM

Posted 23 June 2019 - 05:44 PM   Best Answer

This issue can be closed, I have confirmed that you can sign into a user account user your Emby password as I have changed my Emby connect password and can no longer sign into my user account using my old password



#3 Luke OFFLINE  

Luke

    System Architect

  • Administrators
  • 139791 posts
  • Local time: 06:38 PM

Posted 23 June 2019 - 05:53 PM

Thanks for the feedback.







Also tagged with one or more of these keywords: security, vulnerability, bug

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users