Werk #15187: Enforce password policy in REST API and user management

Component

Setup

Title

Enforce password policy in REST API and user management

Date

Feb 3, 2023

Level

Trivial Change

Class

Bug Fix

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

2.2.0b1	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.1.0p21	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)
2.0.0p34	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)

Prior to this Werk both the REST API and the user management UI (Setup > Users) did not correctly enforce the password policy for local accounts.

As a result, administrators with the "User management" permission could set passwords that don't comply with the policy for their own or other users' accounts.

Note that the "Change password" option in the user profile menu was not affected by the issue and correctly checked the password policy.

To the list of all Werks