902419 - Master password should block access to cookies/active logins when not entered

Status: RESOLVED INVALID

(Firefox :: Security, enhancement, P5)

Description

[matthew.leather]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:23.0) Gecko/20100101 Firefox/23.0 (Beta/Release)
Build ID: 20130730113002

Steps to reproduce:

Enter an incorrect master password


Actual results:

Still able to access sites where the login is already active.


Expected results:

Should be unable to access these sites from a security standpoint.

Would also help to have a guest session system to prevent the enter your password spam from the master password when it's not entered.

Comment 1

[Mihai Morar, (:MihaiMorar)]

Works as expected on Latest Nightly

Mozilla/5.0 (Windows NT 6.1; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0(20130827030201)

> Steps to reproduce:
> Enter an incorrect master password

> Actual results:
> Still able to access sites where the login is already active.
This is expected to happen.

> Expected results:
> Should be unable to access these sites from a security standpoint.
This is not expected to happen. If you enter an incorrect master password in Options->Security->Saved Password you are not allowed to see the sites where you are already logged and theyr passwords. For example: 

1. login to facebook, and check keep me logged in option. 
2. Go to Options->Security and set a Master Password
3. Reopen Firefox and go to www.facebook.com

Expected:
After step 3 you must pe automatically loged in you fb account from step 1.