337551 - Able to log into gmail without password

Status: RESOLVED DUPLICATE of bug 345345

(Firefox :: Security, defect)

Description

[Hugh Janus]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8) Gecko/20051107 Firefox/1.5
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8) Gecko/20051107 Firefox/1.5

Using the firefox extension Crash Recovery, I was able to log into my gmail account without entering any credentials.
I logged off my machine without closing firefox.  Then shutdown the computer.  I restarted the computer and opened firefox.  The extension asked me if I wanted to recover lost pages, I said yes.  Hey presto, my gmail account opens and logs in without asking me to authenticate.

Reproducible: Always

Steps to Reproduce:
1. Start -> Shutdown without closing firefox
2. Reboot
3. Open firefox
Actual Results:  
GMail logs in.  I have not tried this with over webmail accounts

Expected Results:  
Gmail logs in without asking for password.

Comment 1

[krishna]

Seems to be a dupe of Bug# 358042

Comment 2

[Carsten Book [:Tomcat]]

works for me with Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9a8pre) Gecko/2007082705 Minefield/3.0a8pre ID:2007082705 -

Hugh, is this still a problem with a recent Firefox Release like Firefox 2.0.0.6 ?

Comment 3

[Wayne Mery (:wsmwk)]

Hugh's adderss is dead
following krishna's lead, duping to bug 345345