search

karlma / fusionpbx

Automatically exported from code.google.com/p/fusionpbx
0 stars 0 forks source link

saved password from the browser is used when creating new extension #967

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. Login
2. Save the login password in the password manager
3. Create a new extension

What is the expected output? What do you see instead?
The newly created extension voicemail password will be your FusionPBX GUI 
password.

What version of the product are you using? On what operating system?
Ubuntu 14.04 - Firefox 38 - FusionPBX 3.8

Original issue reported on code.google.com by t...@plustel.dk on 21 May 2015 at 8:10

GoogleCodeExporter commented 9 years ago 
IMHO, it's a browser/user issue, not a FusionPBX issue. Why would you save the 
password and think that the browser won't use it when it stumbles upon a 
password field?

Did you try emptying the field before saving ?

Original comment by Alpha...@gmail.com on 21 May 2015 at 8:14

GoogleCodeExporter commented 9 years ago 
This issue was not present in 3.6
But I do agree that the problem might be more a browser issue. 

But it might create security issue because those password are apparently not 
encrypted.

Original comment by t...@plustel.dk on 21 May 2015 at 8:23

GoogleCodeExporter commented 9 years ago 
Update: I got two 3.8 installation. The first one installed around 8 days ago 
does not have that issue. The second one that was installed yesterday have that 
issue.

Original comment by t...@plustel.dk on 21 May 2015 at 12:36

GoogleCodeExporter commented 9 years ago 
I tried to reproduce on Ubuntu 14.04.1 - Firefox 38.0 - FusionPBX up to date 
(trunk) but I failed to reproduce the described behaviour.

Original comment by Alpha...@gmail.com on 21 May 2015 at 12:48

GoogleCodeExporter commented 9 years ago 
I deleted the password from the password manager and the issue is not present.
Then I went back to save the password and the issue is back.
I reproduced the same behavior on Window 8 + Firefox.
The issue is not present on Chromium 41 + Ubuntu 14.04.

Original comment by t...@plustel.dk on 21 May 2015 at 1:25

GoogleCodeExporter commented 9 years ago 
I reproduced the behaviour with opera on windows 8.1 + Opera, but not for the 
extensions, only for the line user/pass in device editor

Original comment by Alpha...@gmail.com on 21 May 2015 at 2:42

GoogleCodeExporter commented 9 years ago 
Guys, we can probably fix this 'issue' pretty easily by changing the password 
input's name attribute to something different than the login password input's 
name.  Will try to get to it today, then you can update and test to see if the 
issue is resolved.

Original comment by sevenate on 21 May 2015 at 2:51

GoogleCodeExporter commented 9 years ago 
Actually, it's going to be difficult to fix what can't consistently be 
reproduced.  I tried on latest FusionPBX + Win 8.1 + Firefox 37.02.  Then, 
upgraded Firefox to 38.0.1, but couldn't reproduce the issue.  So, I tried on 
IE 11 and Chrome 43, with passwords saved in the browser's password managers, 
and nothing.  Sorry.

Original comment by sevenate on 21 May 2015 at 6:49

GoogleCodeExporter commented 9 years ago 
Don't save your passwords; end of the issue.

Original comment by Alpha...@gmail.com on 21 May 2015 at 7:05

GoogleCodeExporter commented 9 years ago 
I was going crazy with this until I figured out why the passwords were screwed.

Original comment by nysoluti...@gmail.com on 22 May 2015 at 2:30

GoogleCodeExporter commented 9 years ago 
updated this morning and the issue is now fixed

Original comment by t...@plustel.dk on 22 May 2015 at 9:19