The user management section of the web application permits the creation of user accounts with excessively weak passwords, including single-character passwords.