294472 - Able to login my GMAIL account without having to enter USR/PWD

Status: RESOLVED WORKSFORME

(Firefox :: Security, defect)

Description

[Hector Avila Delgado]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; rv:1.7.3) Gecko/20041020 Firefox/0.10.1
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; rv:1.7.3) Gecko/20041020 Firefox/0.10.1

I honestly thing there's something wrong. Either with Firefox or Gmail.
Basically i can consistently access my email account without entering USR/PWD.
After accessing a first time. I can access sometimes up to 3 times without gmail
prompting for PWD. This happens with Firefox 1.4/XP and with Firefox 1.0/Fedora
core 3.

Reproducible: Always

Steps to Reproduce:
1. Open Firefox
2. go to www.gmail.com
3. enter USR/PWD. Check e-mail.
4. Sign OUT (i can see login page again)
5. CLOSE Firefox
6. Open firefox (it does not matter if it's one second later or hours)
7. Open firefox again.
8. See e-mail account open.

Actual Results:  
Complete access to my e-mail account.

Expected Results:  
Correctly close e-mail account.

Comment 1

[Gervase Markham [:gerv]]

Are you sure your cookie file is not read-only, or something like that? Gmail
auto-login is cookie-dependent.

Gerv

Comment 2

[Daniel Veditz [:dveditz]]

Since no one can reproduce this opening up to a wider audience as a sanity
check, but will probably eventually be closed WFM. Did you check the permissions
on your cookie file as Gerv suggested?

Comment 3

[Jesse Ruderman]

No response from reporter, marking WFM.