- 보안 취약점 개선, 비밀번호 체크시 IF 조건 수정

2026-02-10 13:22:27 +09:00
parent 5377631fbf
commit 5af6ce7079
1 changed files with 1 additions and 1 deletions
@@ -795,7 +795,7 @@ public class MainController implements InterceptorSkipController {
 			// 3. 비밀번호 체크
 			if (!userInfo.getPassword().equals(Seed.encrypt(resetPassword))
-					&& !userInfo.getUserid().equals(resetUserId)) {
+					|| !userInfo.getUserid().equals(resetUserId)) {
 				UserAccessLogger.log(request, LOG_CATEGORY_LOGIN, "F",
 						localeMessage
 								.getString("login.pwdmismatch5"));