Windows 10 will reach EOS (end of support) on October 14, 2025. For more information, see this article.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Natao arisiva ity resaka mitohy ity. Mametraha fanontaniana azafady raha mila fanampiana.

Security flaw: passwords on Firefox app for Android can be seen without entering phone pin/password.

  • Tsisy valiny
  • 2 manana an'ity olana ity
  • 10 views
talleyegrace
talleyegrace
more options

Firefox for Android app, build 132.0.2.

When opening the password tab, the prompt to enter your devices pin or password appears as it should. However, spamming the "cancel" button on the prompt or the Android's back button (about 4 or 5 times) allows you to go to the password manager and view all usernames and passwords without reentering the device's pin/password.

To recreate: open the password tab, enter pin prompt opens, pressing cancel reopens the pin prompt, pressing cancel 4 or 5 times opens the password manager without verification.

Firefox for Android app, build 132.0.2. When opening the password tab, the prompt to enter your devices pin or password appears as it should. However, spamming the "cancel" button on the prompt or the Android's back button (about 4 or 5 times) allows you to go to the password manager and view all usernames and passwords without reentering the device's pin/password. To recreate: open the password tab, enter pin prompt opens, pressing cancel reopens the pin prompt, pressing cancel 4 or 5 times opens the password manager without verification.