Exclusive Check-Out Option in PVP Causes Double Password Change

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

The Exclusive Check-Out and Change Password On Connection End options have been enabled in a password view policy for a target account. When a user auto-connects with that account, the password is changed twice when the connection ends, once by the user which accessed the account and once by a scheduled job. If only Exclusive Check-Out is enabled, the password does not get changed at all when the connection ends.

Environment

Privileged Access Manager, 4.1.0-4.1.7, 4.2

Cause

There was an issue in the code which resulted in the password change mechanism to be called twice.

Resolution

The code will be fixed as DE604854 in the 4.1.8 and 4.2.1 releases.