Closed Bug 1934210 Opened 1 year ago Closed 1 year ago

Loophole accessing passwords list

Categories

(Firefox for Android :: Logins, defect)

Firefox 132
All
Android
defect

Tracking

()

RESOLVED DUPLICATE of bug 1928779

People

(Reporter: ot7, Unassigned)

References

Details

(Keywords: reporter-external)

User Agent: Mozilla/5.0 (Android 11; Mobile; rv:132.0) Gecko/132.0 Firefox/132.0

Steps to reproduce:

  1. Tap on 3 dot menu
  2. Tap on Passwords
  3. Swipe 4 times to go back:
  • Hide keyboard
  • Back of pin monit
  • Hide keyboard on 2nd pin monit
  • Back of 2nd pin monit

Actual results:

List of login creditonals, passwords opened

Expected results:

Not seeing passwords without entering lock screen pass (PIN). Move back

It is related to other bug, as this probably show the same loophole https://bugzilla.mozilla.org/show_bug.cgi?id=1919814

After entering the passcode (once or more), tapping quickly at least twice on the close (X) button displays the passwords page correctly.

See Also: → 1919814

Thank you for the report. This has been previously reported, and will be fixed in the upcoming Firefox 133 release.

Status: UNCONFIRMED → RESOLVED
Closed: 1 year ago
Duplicate of bug: CVE-2024-11703
Resolution: --- → DUPLICATE
Group: mobile-core-security
You need to log in before you can comment on or make changes to this bug.