{"action":"opened","issue":{"url":"https://api.github.com/repos/nilsteampassnet/TeamPass/issues/1149","labels_url":"https://api.github.com/repos/nilsteampassnet/TeamPass/issues/1149/labels{/name}","comments_url":"https://api.github.com/repos/nilsteampassnet/TeamPass/issues/1149/comments","events_url":"https://api.github.com/repos/nilsteampassnet/TeamPass/issues/1149/events","html_url":"https://github.com/nilsteampassnet/TeamPass/issues/1149","id":125588238,"number":1149,"title":"Display message - On failed Login.","user":{"login":"cenasmynet","id":16591902,"avatar_url":"https://avatars.githubusercontent.com/u/16591902?v=3","gravatar_id":"","url":"https://api.github.com/users/cenasmynet","html_url":"https://github.com/cenasmynet","followers_url":"https://api.github.com/users/cenasmynet/followers","following_url":"https://api.github.com/users/cenasmynet/following{/other_user}","gists_url":"https://api.github.com/users/cenasmynet/gists{/gist_id}","starred_url":"https://api.github.com/users/cenasmynet/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cenasmynet/subscriptions","organizations_url":"https://api.github.com/users/cenasmynet/orgs","repos_url":"https://api.github.com/users/cenasmynet/repos","events_url":"https://api.github.com/users/cenasmynet/events{/privacy}","received_events_url":"https://api.github.com/users/cenasmynet/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-01-08T10:58:44Z","updated_at":"2016-01-08T10:58:44Z","closed_at":null,"body":"When you try to login in the teampass with a wrong user name you get \"This user do not exist!\" and with wrong password \"Bad password for this account!\", in the 2 cases the message to the user should be the same \"Wrong user name or Password!\" and internally log the message to the system with the Right message.\r\n\r\nThis give this kind of info to the end user is a security issue.\r\nThe attacker already know that the user name is rigth.\r\n\r\nBest regards."}}