Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

为提升您的使用体验,本站正在维护,部分功能暂时无法使用。如果本站文章无法解决您的问题,您想要向社区提问的话,请到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 提问,我们的支持社区将会很快回复您的疑问。

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

Learn More

master password bug in mozilla thunderbird

  • 3 个回答
  • 1 人有此问题
  • 17 次查看
  • 最后回复者为 christ1

more options

To whom it may concern,

Hi, my name is ashim roy. i think i may have found a serious security flaw in thunderbird master password for locking and unlocking the app.

i can open the app, access all the emails, change settings. passwords, even see the passwords for all my emails without trying a single masterpassword. when you click the thunderbird icon to open the app the masterpassword prompt pops up asking for the password, all you have to do is click cancel and it opens up the app. you can click on any email again it will ask for the master password just click cancel and you will have access to all the emails. sometime it asks you two or three times for the password when you click something but it doesn't matter just click cancel and continue with your task.

It beast the whole purpose of the master password when anybody can just have access to your emails, passwords, your contact lists, everything. the thunderbird version 78.13.0(64-bit), OS Name: Ubuntu 21.04, OS Type:(64-bit), GNOME Version: 3.38.5, Windowing System: Wayland

To whom it may concern, Hi, my name is ashim roy. i think i may have found a serious security flaw in thunderbird master password for locking and unlocking the app. i can open the app, access all the emails, change settings. passwords, even see the passwords for all my emails without trying a single masterpassword. when you click the thunderbird icon to open the app the masterpassword prompt pops up asking for the password, all you have to do is click cancel and it opens up the app. you can click on any email again it will ask for the master password just click cancel and you will have access to all the emails. sometime it asks you two or three times for the password when you click something but it doesn't matter just click cancel and continue with your task. It beast the whole purpose of the master password when anybody can just have access to your emails, passwords, your contact lists, everything. the thunderbird version 78.13.0(64-bit), OS Name: Ubuntu 21.04, OS Type:(64-bit), GNOME Version: 3.38.5, Windowing System: Wayland

由Wayne Mery于修改

所有回复 (3)

more options

Master password is not intended to protect the emails on your computer - it's to protect passwords.

To protect the contents of your computer, including mail, that's what your user account on the computer is for.

more options

I think you misunderstood me. I wasn’t talking about user account password for my pc. I was specifically talking about master password for Mozilla thunderbird that one can create to lock the mozilla thunderbird app so nobody else can open it when somebody else using my pc.

more options