security issue with user access control
the user's access control is not as save as it should be. For verifying a password vtiger always uses a salt build from a user's name. But a salt should have a random value. In addition, SHA512 should be used. see for example here for more details of making it right: https://crackstation.net/hashing-security.htm