Skip to content

A-LimitBlankPasswordUse rule checks wrong data collection #346

@AbbasTinwala092

Description

@AbbasTinwala092

File: Healthcheck/Rules/HeatlcheckRuleAnomalyRemoteBlankPasswordUse.cs
Line: 19

Issue:
The rule iterates over healthcheckData.GPPPasswordPolicy but the
LimitBlankPasswordUse setting is stored in healthcheckData.GPOLsaPolicy
by the SubExtractLsaSettings() method in HealthcheckAnalyzer.cs (line 3914).

Current (incorrect):
foreach (GPPSecurityPolicy policy in healthcheckData.GPPPasswordPolicy)

Should be:
foreach (GPPSecurityPolicy policy in healthcheckData.GPOLsaPolicy)

Impact:
The rule never triggers because it searches for LimitBlankPasswordUse in a
collection that doesn't contain it.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions