Magebean Logo Magebean
← Back to Baseline

MB-R308

HUMAN VERIFICATION REQUIRED ASVS 6.4.6 Admin-assisted reset without password knowledge

MB-C18 ASVS Level 3 Human Assurance High

Administrative users can initiate the password reset process for the user, but that this does not allow them to change or choose the user's password. This prevents a situation where they know the user's password.