Closed Bug 1435205 Opened 7 years ago Closed 7 years ago

Master password easily bypassed

Categories

(Firefox for Android Graveyard :: Firefox Accounts, defect)

Product:
Firefox for Android Graveyard
Component:
Firefox Accounts
Version:
Firefox 58
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 1410753

People

(Reporter: mozilla_bugzilla, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0 Build ID: 20180128191252 Steps to reproduce: Preliminary work: 1. Add firefox sync account 2. Set master password or just get any phone where there is a Master Passwor Actual Master Password bypass 1. Go to Android settings and reset Firefox data and cache 2. Open Firefox, master password is gone but sync is still there 3. Patiently wait for Sync data to downlaod 4. You have access to all password in the Sync account without knowing the Master Password Actual results: Gained access to all passwords in a Firefox Sync account without knowing the master password Expected results: Firefox sync should be removed when resetting the master password
Group: firefox-core-security
Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
Product: Firefox for Android → Firefox for Android Graveyard
You need to log in before you can comment on or make changes to this bug.