1823703 - master password doesn't work

Status: RESOLVED DUPLICATE of bug 1566458

(Thunderbird :: Untriaged, defect)

Description

[mm]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0

Steps to reproduce:

When incorrect master password is entered or is blank, unauthorized user could see every downloaded mails

Actual results:

just do not enter the password and click cancel several times, then thunderbird run and you will have access to all emails. Excluding those that came after the last successful login

Expected results:

all it should be blocked, and the program should not start

Comment 1

[:Gijs (he/him)]

The primary password is not intended to prevent people accessing downloaded mail, AIUI. Either way this is not a remotely exploitable security bug in the mail client.