Pierluigi Paganini
August 16, 2019
The latest release for Mozilla Firefox
“When a master password is set, it is required to be entered before
The vulnerability, tracked as CVE-2019-11733, was rated as “moderate impact”
When a master password is set, it must be provided to access the saved login credentials from the Saved Logins menu. Users can see the stored passwords by pressing the “Show Passwords” button and then entering the master password.
The problem is that users could right-click on an entry and select “Copy Password” and the password would be copied to the clipboard without having to provide the master password.
The latest release solved the issue, and if a master password is set, it will be impossible to use the “Copy Password” feature without providing the master password.
Naked Security author Paul Ducklin pointed out that Firefox’s password manager has another important problem, it is turned on by default, but without a master password.
“By the way, Firefox’s password manager raises two interesting controversies even in the absence of a security problem like the one mentioned here.” reads a post published by Ducklin.
“The password manager is turned on by default, but without a master password, as you can see by doing a fresh install and then going to the Privacy &
| [adrotate banner=”9″] | [adrotate banner=”12″] |
(
[adrotate banner=”5″]
[adrotate banner=”13″]
