625670 - Security Breach in Mozilla Firefox

Status: VERIFIED INVALID

(Firefox :: Security, defect)

Description

[Sap]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13

Any one can view the password in firefox using Tools -> Page Info -> Details -> View Saved password -> Show Password.

Please encrypt or do it password protected.

Reproducible: Always

Steps to Reproduce:
1. Any one can view the password in firefox

Actual Results:  
All the saved password displayed.

Expected Results:  
Should not display any password.

Please let me know any feedback/suggestion/query.

Comment 1

[Sap]

Attachment: Security Breach in Mozilla Firefox

security issue in Mozilla Firefox.

Comment 2

[Bob Clary [:bc] (inactive)]

Sap, thanks for the report.

The passwords can be encrypted and access to them restricted through the use of a master password. Please see <http://support.mozilla.com/en-US/kb/Protecting%20stored%20passwords%20using%20a%20master%20password?redirectlocale=en-US&redirectslug=Master+Password> and <http://kb.mozillazine.org/Master_password>.