Able to install Aurora without admin rights

RESOLVED INVALID

Status

()

RESOLVED INVALID
7 years ago
7 years ago

People

(Reporter: ankurdatta2003, Unassigned)

Tracking

6 Branch
All
Other
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

7 years ago
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:6.0a2) Gecko/20110627 Firefox/6.0a2
Build ID: 20110627042004

Steps to reproduce:

1) Downloaded the Aurora exe- firefox-6.0a2.en-US.win32.installer
2) I had a freshly formatted Windows 7 32 bit laptop
3) Did not have Admin rights on my user
4) Started Installation
5) Windows asked me to provide a Admin credential
6) Gave my non admin credential which was not accepted
7) Dismissed the dialog from windows
8) Continued installation of Aurora without admin rights
9) Installation succeded
10) Able to use Aurora and right now filing this bug using it



Actual results:

Installation succeeded without Admin rights.


Expected results:

Installation should not have happened without admin rights

Comment 1

7 years ago
I don't believe this is a bug. It's certainly not a security issue. It's perfectly normal to be able to install software into your user area (c:\users\username\Program Files) without requiring administrator privileges, and I believe that's what our installer does by default if it cannot obtain admin privileges to install into a global location. Robstrong, please correct me if I'm wrong.

In any case, there's no need for this bug to be private: there's no exploit here.
Group: core-security
bsmedberg is correct and this is intentional.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.