Auto logging into other users account

RESOLVED INCOMPLETE

Status

()

Firefox
Untriaged
RESOLVED INCOMPLETE
4 years ago
4 years ago

People

(Reporter: sriram, Unassigned)

Tracking

23 Branch
x86_64
Windows 7
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: "your autocomplete somehow has had this information entered." Then how can be the firefox secure ?)

(Reporter)

Description

4 years ago
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:23.0) Gecko/20100101 Firefox/23.0 (Beta/Release)
Build ID: 20130814063812

Steps to reproduce:

I tried to login to www.freshersworld.com


Actual results:

The login form is auto completed by some other unknown mail Id and password.
The login details are not related to me or this system users.

Im from Tamilnadu, India. But the login details were one of the person of Orrissa, India. I don't know that person. I dono how his details came into my firefox with a password protected system used only by me.

Firefox autocomplete for mails and other security systems are incomplete..
My data's are sacrificed.
If I can see others data, Then obviously, others can login to my profile too..

Its related to autocomplete forms and not with the site freshersworld.com


Expected results:

It  should have asked me to enter my login.
This is likely not a security issue but a single issue with a single machine. It would be a good idea to review this support article
https://support.mozilla.org/en-US/kb/control-firefox-automatically-fills-in-forms?redirectlocale=en-US&redirectslug=Form+autocomplete

Either the website filled the form for you or your autocomplete somehow has had this information entered. You can also use that article to clear out the data you don't want or to disable autocomplete entirely.
Group: core-security
Status: UNCONFIRMED → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → INCOMPLETE
(Reporter)

Updated

4 years ago
Whiteboard: "your autocomplete somehow has had this information entered." Then how can be the firefox secure ?
(Reporter)

Comment 2

4 years ago
Reviewing the article clears my browser cache and cookies...

But How did it enter my cookie or cache (or) whatsoever!!

Im using firefox only for auto logging my gmail.

When I visit Gmail.com, it enters the username and password in those fields automatically. Hope so it is done by firefox rather than google.

I didn type some few letters or words to get the autocomplete forms. It auto completes when I visit a page. So This is a firefox function Right..

"your autocomplete somehow has had this information entered." Then how can be the firefox secure, if it gives the users username and password accidentally to others ?
You need to log in before you can comment on or make changes to this bug.