Security Bug

B

Bertio

First of all when I click on the outlook live link it comes up with with my
student email account, with no password (It only remembers my address).

The actuall bug happens if I type some some characters into the password
field (any characters) and click "forgot your password" and then before it
loads click "sign in with a diffrent account". This takes me to the "forgot
password page" and if I click the back button my account with my "correct"
password is sitting waiting to be signed in with.

For now I can only get it working (the bug) with my student account.
However, it still feels like a nasty security flaw.

----------------
This post is a suggestion for Microsoft, and Microsoft responds to the
suggestions with the most votes. To vote for this suggestion, click the "I
Agree" button in the message pane. If you do not see the button, follow this
link to open the suggestion in the Microsoft Web-based Newsreader and then
click "I Agree" in the message pane.

http://www.microsoft.com/office/com...6048c1d53&dg=microsoft.public.outlook.general
 
R

Roady [MVP]

How is this Outlook related? Sounds like you are dealing with a website and
not with Outlook itself.

Anyway, it sounds like you were signed in with on a different site already
for that account. The saving of the password is a local thing and is not
automatically filled by the website or something. If you think there is an
issue with the Live Sign In method, you can use the Windows Live forum;
http://answers.microsoft.com/windowslive/default.aspx
 
V

VanguardLH

Bertio said:
First of all when I click on the outlook live link it comes up with with my
student email account, with no password (It only remembers my address).

The actuall bug happens if I type some some characters into the password
field (any characters) and click "forgot your password" and then before it
loads click "sign in with a diffrent account". This takes me to the "forgot
password page" and if I click the back button my account with my "correct"
password is sitting waiting to be signed in with.

For now I can only get it working (the bug) with my student account.
However, it still feels like a nasty security flaw.

Pages? Live site? Password field? And just how does any of this have to
do with Outlook? Outlook is an e-mail client, not a web browser.

And just what might be your "suggestion"? Suggestions are not questions.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top