When requirepass is set any Password could be used and will be accepted

[spastorclovr]

Is this a regression?

Yes

Description

It seems very similar to 👇

#3113

I can see that this patch is not available in the 4.0 branch.

Could you guys merge it there also and have it available in the corresponding Docker image?

🙏 thx!

Please provide a link to a minimal reproduction of the bug

No response

Screenshots or videos

• Set requirepass to "password"
• Connect using rediscli- h -p password
  -> it will work
• Connect using rediscli- h (aka no password provided)
• -> any command will trigger ' ERR NOAUTH Authentication required'
• Connect using rediscli- h -p anotherpassword
  -> It will work, and you can run any command as if your password was correct.

Please provide the version you discovered this bug in (check about page for version information)

version : 4.0.2

Anything else?

No response

[Mixficsol]

We will add this issue fix in the subsequent new open-source version v4.0.3 later

[spastorclovr]

Thanks for your reply. I will keep an eure on the new version then.

[loverkoo]

same on new version 3.5.6

[spastorclovr]

A bit off-topic but what version should we be using, the 3.5 line or 4.X ? What are the differences?

Thx