Store Doesn't Validate Whether Email is Registered On Store After Clicking Forgot Password

(Doc ID 2157015.1)

Last updated on JULY 08, 2016

Applies to:

Oracle Commerce Cloud Service - Version N/A to N/A
Information in this document applies to any platform.


Storefront doesn't validate whether email registered in store after clicking forgot password.

After inputting an email for an arbitrary email (non-user) through the forgot password wizard on the storefront there would be an error letting you know that the user does not exist.

The issue can be reproduced at will with the following steps:
1. On storefront - Click Login
2. Click Forgot Password
3. Enter in arbitrary email (following standard email protocol
4. Receive a positive note about email being sent regardless of user validity


Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms