Mozilla will shut down Pocket’s services on July 8, 2025. At that time users will no longer be able to access the Pocket website, apps and API. You can export your saved items and API data until October 8, 2025 before they are permanently removed. For more information, see this article.

Avatar for Username

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Security flaw: Settings accessible after canceling OS authentication prompt

  • 1 reply
  • 0 have this problem
  • 32 views
  • Last reply by Paul

Fouad Hany
Fouad Hany

When accessing about:logins, Firefox prompts for system authentication (Primary password or master password). However, if the user cancels the prompt twice, the password manager still opens and displays all saved logins without authentication.

This behavior bypasses the intended security check and could pose a risk, especially in shared or public machines

When accessing about:logins, Firefox prompts for system authentication (Primary password or master password). However, if the user cancels the prompt twice, the password manager still opens and displays all saved logins without authentication. This behavior bypasses the intended security check and could pose a risk, especially in shared or public machines

All Replies (1)

Paul
Paul
  • Moderator
  • Top 10 Contributor

Hi

Thank you for flagging this up. I am looking into this with Mozilla staff and hope to respond soon with an update.

Helpful?

Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.