System-generated password does not meet Password Security Settings

[SinergiaCRM]

Issue

In Password Management, if the Enable System-Generated Passwords Feature option is enabled and a password security configuration is specified, the system-generated passwords do not meet the security requirements.

Possible Fix

The password generation function should take into account the security requirements defined in:

$sugar_config['passwordsetting']['minpwdlength']
$sugar_config['passwordsetting']['oneupper']
$sugar_config['passwordsetting']['onelower']
$sugar_config['passwordsetting']['onenumber']
$sugar_config['passwordsetting']['onespecial']

SuiteCRM/modules/Users/User.php

Lines 2266 to 2286 in e572230

	public static function generatePassword()
	{
	$res = $GLOBALS['sugar_config']['passwordsetting'];
	$charBKT = '';
	//chars to select from
	$LOWERCASE = "abcdefghijklmnpqrstuvwxyz";
	$NUMBER = "0123456789";
	$UPPERCASE = "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
	$SPECIAL = '~!@#$%^&*()_+=-{}|';
	$condition = 0;
	$charBKT .= $UPPERCASE . $LOWERCASE . $NUMBER;
	$password = "";
	$length = '6';
	// Create random characters for the ones that doesnt have requirements
	for ($i = 0; $i < $length - $condition; $i++) { // loop and create password
	$password = $password . substr($charBKT, mt_rand() % strlen($charBKT), 1);
	}
	return $password;
	}

Steps to Reproduce the Issue

1. Go to _Password Management_
2. Check the _Enable System-Generated Passwords Feature_ option 
3. Change default _Password Security Settings_: minumum length and contain special characters
4. Create a new user 
5. Check tthat the email received by the user with the new password does not meet the defined security requirements.
...

Context

No response

Version

7.14.6

What browser are you currently using?

Chrome

Browser Version

No response

Environment Information

MySQL, PHP 8

Operating System and Version

Ubuntu 20.04