191959 - It shows login_name and password at URL bar when we are logging to bugzilla

Status: RESOLVED DUPLICATE of bug 15980

(Bugzilla :: User Accounts, defect)

Description

[Naveen Joshi]

User-Agent:       Mozilla/4.79 [en] (X11; U; Linux 2.4.18-3 i686)
Build Identifier: bugzilla 2.12

I have choose the log- in option and enter the email address and password. but
when I click the login button to go ahead it shows my password in the URL bar.

Reproducible: Always

Steps to Reproduce:
1.choose log -in button
2.fill up the email address and password
3.press login button 

Actual Results:  
shows password  at URL bar

Expected Results:  
password should be in encrepted format

Comment 1

[John Unruh]

Bugzilla

Comment 2

[Naveen Joshi]

This problem is in bugzilla 2.14 ver. not in 2.17.1.

Comment 3

[Naveen Joshi]

This problem is in bugzilla 2.12 ver. which I am using rightnow.

Comment 4

[Myk Melez [:myk] [@mykmelez]]

Moving from "security" group to "webtools security" group and cc:ing potentially
interested parties.  This bug won't be fixed because the problem does not occur
on any currently maintained version of Bugzilla, all of which POST the form to
the server.  You should upgrade your installation of Bugzilla to a more recent
version like 2.16.2.

Comment 5

[Gervase Markham [:gerv]]

Just out of interest, is this bug in the latest version of 2.14?

Gerv

Comment 6

[Naveen Joshi]

I am not sure that its in 2.14 or not , I  just mis-typed above. I found it only
2.12 version

Comment 7

[Dave Miller [:justdave]]

This was fixed in Bugzilla 2.14.0.

Comment 8

[Dave Miller [:justdave]]

Removing security flag because this had an advisory release a long time ago.

*** This bug has been marked as a duplicate of 15980 ***

Comment 9

[Dave Miller [:justdave]]

Naveen: version 2.12 has so many security holes in it it's not even funny.

Please do yourself a favor and upgrade.