The latest release for Mozilla Firefox
“When a master password is set, it is required to be entered before
The vulnerability, tracked as CVE-2019-11733, was rated as “moderate impact”
When a master password is set, it must be provided to access the saved login credentials from the Saved Logins menu. Users can see the stored passwords by pressing the “Show Passwords” button and then entering the master password.
The problem is that users could right-click on an entry and select “Copy Password” and the password would be copied to the clipboard without having to provide the master password.
The latest release solved the issue, and if a master password is set, it will be impossible to use the “Copy Password” feature without providing the master password.
Naked Security author Paul Ducklin pointed out that Firefox’s password manager has another important problem, it is turned on by default, but without a master password.
“By the way, Firefox’s password manager raises two interesting controversies even in the absence of a security problem like the one mentioned here.” reads a post published by Ducklin.
“The password manager is turned on by default, but without a master password, as you can see by doing a fresh install and then going to the Privacy &
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.