-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Medium
-
Affects Version/s: None
-
Component/s: Core features
-
None
Currently anyone can reset anyone else's password if they know the username. It would be better if Crowd mailed them a link that gave them the option to reset the password, and ignore otherwise.