150646 - SSL login-fails strangely

Status: RESOLVED DUPLICATE of bug 145959

(Core :: Security, defect)

Description

[Mark Lord]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0.0) Gecko/20020529
BuildID:    2002052918

Unable to complete the secure login sequence.  Have to resort to ANY other
browser (Netscape 4.xx works fine) instead of mozilla.

Broken, big time -- this used to work a few months ago.

Reproducible: Always
Steps to Reproduce:
1.Go to the URL shown, 
2.Enter 1234567812345678 as the "card number" (not a valid account, but it
really makes no difference).
3.Enter 12345678 as the "password".
4. Click on "Sign In".

Actual Results:  Instead of an "invalid login" message, the browser goes to:
http://www.cibc.com/solution/service/pers/home.jsp?BV_UseBVCookie=Yes&locale=en_CA&fullFrame=


Expected Results:  Should give an "invalid login" message: 
https://www.cibc.com/solution/service/pers/pcb/scripts/SignOn.jsp

Or if a valid account is used, it should login the user.  Both fail.

Try it and gather any information you want.  This used to work fine back around
(I think) M14 or thereabouts.

Pity.  Of the only two sites for which I require secure login, neither now work
with mozilla (the other was ingrammicro.ca).  Back to NS4.79 I guess.

Good Luck.

Comment 1

[Phil Schwartau]

This is a duplicate of bug 145959
"CIBC online banking no longer allows login"

Reassigning to Security:General for parity with the duplicate bug.

Comment 2

[Phil Schwartau]

Resolving as Duplicate. Mark, thank you for this report. You have
been cc'ed on bug 145959 so you may follow its progress. 

If you have any further news about this site, please add the 
comments to bug 145959; thanks -

*** This bug has been marked as a duplicate of 145959 ***