Closed Bug 1823207 Opened 2 years ago Closed 2 years ago

Browser is suggesting same password for different accounts on same site

Categories

(Firefox :: Untriaged, defect)

Firefox 91
defect

Tracking

()

RESOLVED DUPLICATE of bug 1551723

People

(Reporter: sarthakbhingare15, Unassigned)

Details

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0

Steps to reproduce:

Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0

Hi,
I am just starting in the field of bug bounty so to test for vulnerabilities I create multiple accounts on the website I am testing.

Today while testing on https://www.fastly.com/ site I created two accounts using your Password manager. But while creating second account I observed that Firefox is suggesting me the same password which it suggested before.

Steps:

  1. Open a website using Firefox on your computer.
  2. Create 2 accounts.
  3. While creating first account, make sure you click "Use a Securely Generated Password" when setting password.
  4. While creating second account, click on password field(clear the field if it's filled, and click on it again), and observe that Firefox is suggesting same password that of you set for first account.

I have tested it on https://www.fastly.com/ and https://www.kiwi.com/ sites.

Please let me know if there is any information I could provide to help with the investigation and troubleshooting of this issue.

Thanks!!

Actual results:

The browser is setting same password for multiple accounts on same site.

Expected results:

Browser should suggest different password each time a user creates new account on the site.

Group: firefox-core-security
Status: UNCONFIRMED → RESOLVED
Closed: 2 years ago
Duplicate of bug: 1551723
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.