Closed Bug 1164143 Opened 11 years ago Closed 11 years ago

Passwords transmitted over http://forums.mozillazine.org/ucp.php?mode=login

Categories

(Firefox :: Untriaged, defect)

Product:
Firefox
Component:
Untriaged
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED INVALID

People

(Reporter: shahmeerbond, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 Safari/537.36 OPR/27.0.1689.76 Steps to reproduce: Hey there There is no SSL enabled on the mozillazine.org forums transmitting all the passwords over HTTP, This allows attackers to intercept network traffic and collect the passwords to login on the behalf of the victims Actual results: I was able to intercept the traffic and read the data flowing Expected results: There should be SSL enabled on the domain
Mozillazine is not operated by Mozilla. We don't control this site.
Group: core-security
Status: UNCONFIRMED → RESOLVED
Closed: 11 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.