Bug 4069 - Bugzilla remembers password (forever?)
Bugzilla remembers password (forever?)
Product: Bugzilla
Classification: Community
Component: Bugzilla General (Show other bugs)
All Linux
medium Severity medium (vote)
: ---
: ---
Assigned To: David Lawrence
: Security
Depends On:
  Show dependency treegraph
Reported: 1999-07-16 05:47 EDT by Mads Kiilerich
Modified: 2008-05-01 11:37 EDT (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2000-05-08 00:59:12 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Mads Kiilerich 1999-07-16 05:47:20 EDT
Apparently cookies is used for login to bugzilla. They are
persistent from session to session. Thus once logged in from
a public account (or a random clients browser) MY bugzilla
account becomes public as well.

I suggest:
1: Add a "logout" option which clears the cookie
2: Add a timeout to cookies

check deja.com for how to do it.

I guess the temporary fix is to remove the cookie manually
or disable cookies. However the bug remains in bugzilla...

Regards, mads@kiilerich.com
Comment 1 Trond Eivind Glomsrxd 2002-01-18 16:58:19 EST
There is a logout option now...

Note You need to log in before you can comment on or make changes to this bug.