Client » PQS_Japan

The "Current Password" field is non-functional, allowing users to change their password even after entering an incorrect current password. This compromises account security and expected validation behavior.

Module / Page
Security / Change Password

Module Section
Current Password Field

Screen Size
All Devices

Tested By
Aman Bhuiyan

Steps to Reproduce¶

1. Log in to the application.
2. Navigate to the Change Password section.
3. Enter an incorrect value in the Current Password field.
4. Enter valid values in the New Password and Confirm Password fields.
5. Submit the form.

Expected Result

The Current Password field should be mandatory and validated.
Users should not be able to change their password unless the correct current password is provided.

Actual Result

Users are able to successfully change their password even after entering an incorrect current password.

Attachments
Proof of Concept

Types of Issue
Functional / Security Issue

Root Cause:

Impacted Area: