When a user enters a username for one of the admins on our webtracks site, a password is not required to gain access. Leaving the password field blank and selecting login gives the user access. If you enter in the incorrect password the user is denied access as they should be.
If you attempt to log in with a non-admin user and you leave password field blank, you receive the message that the password is incorrect. The issue seems to only affect admin users.
I tried setting an admin user to non-admin and then the account behaved normally; you could not login when leaving the password field blank. When I changed the user back to admin, the issue returned.