3783456 - Historical password reuse allowed when running 2211 jdk21 new patch

Symptom

It is possible to use a previously used password in both Storefront and Backoffice when running 2211-jdk21.13; changing password.policy.historical.enabled does not prevent reuse. In previous version like 2211.46 (jdk 17), historical password blocking works as expected.

Environment

SAP Commerce Cloud 2211-jdk21.7 and afterwards

Product

SAP Commerce Cloud 2211 for JDK21

Keywords

password history, password reuse, historical password, password.policy.historical.enabled, password.policy.historical.groups.included, password.policy.fallback.enabled, jdk21, 2211, storefront, backoffice, password policy, configuration, security policy, historical limit, upgrade behavior change , KBA , CEC-SCC-PLA-PL , Platform , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.