bug comment allows anyone to log into my yahoo account

VERIFIED FIXED

Status

VERIFIED FIXED
15 years ago
6 years ago

People

(Reporter: Bugzilla-alanjstrBugs, Assigned: myk)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(URL)

(Reporter)

Description

15 years ago
I submitted a comment to a bug, not realizing it would allow anyone to just log
into my account.  I changed the password, but as far as I can tell, it doesn't
care.  

Please edit comment 10 on bug 217370
http://bugzilla.mozilla.org/show_bug.cgi?id=217370#c10
(Reporter)

Comment 1

15 years ago
Reassigned at dawn's request.  myk, I need you to edit comment 10 please.  Dawn
has marked the bug confidential until then.
Assignee: endico → myk
(Reporter)

Comment 2

15 years ago
Well, that one doesn't seem to be exploitable any more, but I'd still like it
removed.  
Done.
Status: NEW → RESOLVED
Last Resolved: 15 years ago
Resolution: --- → FIXED
(Reporter)

Comment 4

15 years ago
Can you unlock bug 217370 then?  Or at least allow the CC list to see it so I
can verify.
Info removed, no longer sensitive
Group: security
(Reporter)

Updated

15 years ago
Status: RESOLVED → VERIFIED
Product: mozilla.org → Websites
Component: www.mozilla.org → General
Product: Websites → www.mozilla.org
You need to log in before you can comment on or make changes to this bug.