unable to authenticate into Apple ID account after supplying correct username & password when password is 8 characters or less

Originator:appleidbugs
Number:rdar://27073903 Date Originated:28-Jun-2016 11:14 PM
Status:Open Resolved:
Product:iCloud Product Version:
Classification:Security Reproducible:Always
 
Summary:
User is unable to authenticate into an Apple ID account after supplying correct username & password. Instead, the user is presented with a modal to change the password with no option to postpone.

Steps to Reproduce:
1. at appleid.apple.com enter a valid Apple ID username with the correct password that is 8 characters or shorter.
2. The user is presented with a modal dialog that states  “Update Your Apple ID” and says: “You must update your account information to continue.
To make these changes, answer your security questions first.” 
3. Submit correct answers for the two security questions then click “Continue”
4. Text of body of modal dialog changes to: “Stronger Password Required”
5. click Cancel.

Expected Results:
The user should be authenticated into Apple ID account but should get warning to update the password.

Actual Results:
The user is unable to authenticate into account.

Regression:
This used to work fine up until April 2016

Notes:
This causes severe problems for users of legacy password systems for special needs and accessibility.

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!