TYPO3 Core

The datahandler hook implementation BackendUserPasswordCheck sets a random password for a new backend user, if the provided password is empty in $incomingFieldArray. The generated password is however a random HMAC string, which does not fulfill the requirements of the default password policy. Therefore, a password policy waring is shown and the generated random password is not used.

It should be ensured, that the generated password does at least fulfill the requirements of TYPO3s default password policy.