bug #16244 feat(users): add reset password support from ui

[Regzox]

• add reset password capabilities to users ui
• activate/deactivate still trigger a password reset

[vitam-prg]

Checkmarx One – Scan Summary & Details – 5626ab11-1171-498b-8ff0-13429534da2e

---

New Issues (5)

Checkmarx found the following issues in this Pull Request

#	Severity	Issue	Source File / Package	Checkmarx Insight
1		CVE-2026-55153	Maven-com.mchange:mchange-commons-java-0.2.15	details Recommended version: 0.4.0.redhat-00001 Description: mchange-commons-java is a Java library of shared utility classes used by mchange projects like the c3p0 connection pool. Prior to version 0.6.0, it... Attack Vector: ADJACENT_NETWORK Attack Complexity: HIGH Vulnerable Package
2		Parameter_Tampering	api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/TenantController.java: 130	details Method create at line 130 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/TenantController.java gets user input from element dt... Attack Vector
3		Log_Forging	api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/UserController.java: 331	details Method resetPassword at line 331 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/UserController.java gets user input from eleme... Attack Vector
4		Log_Forging	api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/UserController.java: 331	details Method resetPassword at line 331 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/UserController.java gets user input from eleme... Attack Vector
5		Log_Forging	api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/UserController.java: 266	details Method patch at line 266 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/UserController.java gets user input from element parti... Attack Vector

---

Fixed Issues (17)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	Privacy_Violation	api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 117
	Privacy_Violation	api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 85
	Privacy_Violation	api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 85
	Heap_Inspection	api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/user/service/UserEmailService.java: 71
	Log_Forging	api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/UserController.java: 148
	Log_Forging	api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/UserController.java: 148
	Log_Forging	api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/UserController.java: 148
	Log_Forging	api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/UserController.java: 287
	Log_Forging	api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 235
	Log_Forging	api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CustomerController.java: 211
	Log_Forging	api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 117
	Log_Forging	api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 175
	Log_Forging	api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 175
	Log_Forging	api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/UserController.java: 266
	Log_Forging	api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/UserController.java: 266
	Log_Forging	api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/UserController.java: 266
	Log_Forging	api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/UserController.java: 266

---

Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR