Password changes on 7.13.7 fail

[Thomas Clemens]

After Updating to 7.13.7 our Confluence local user accounts cannot set a new password after clicking "Reset Password" in the forgot password mail. The Dialog answers with "com.atlassian.confluence.core.InsufficientPrivilegeException: User [Anonymous] does not have the required privileges."

Does anyone have the same Issue or even better does anyone have a solution?

[Fabienne Gerhard · Accepted solution]

We have a running workaround plugin for our customers - no guarantee! Tested on multiple systems.

Check out and feel free to test https://docs.xalt.de/pldoc/confserver-79041-423364976.html

[Danial Khoshkhou]

We are seeing the same issue after upgrading from 7.13.4 to 7.13.7, also not using AD/LDAP.

[Felix Albertsmeier]

Thanks for confirming that we are not alone with this (I work with Thomas). We are currently in contact with the Atlassian support, but haven't made any progress towards a solution so far.
Once we figure it out, we'll update here.

And if you or anyone else figures it out first, we'd love to know of course!

[Andrew Lynn]

Hi, I work with Dan.

We've had a response back from Atlassian regarding this issue. They have confirmed that they are able to reproduce the issue on their end and have raised https://jira.atlassian.com/browse/CONFSERVER-79041 bug ticket.

Hope this helps!

[Felix Albertsmeier]

Good morning!

Thanks for the update! We've gotten the confirmation as well now, that we are also affected by this bug. Let's hope they fix it soon!

[Jürgen Ottenbacher]

Hi
unfortunately we have the same problem. Thanks for opening the bug tickets.
Let's hope Atlassian ships a fix soon.

[Danial Khoshkhou]

Added a temporary workaround that works for us to the comments on linked ticket https://jira.atlassian.com/browse/CONFSERVER-79041.

In essence:

• Spin up a webserver and intercept the final password reset action that fails
• Take the user-supplied username and password and manually call the XML-RPC endpoint to set the password