Bug 2036 – squeezenetwork activation security issue

Bug 2036 - squeezenetwork activation security issue

Summary:

squeezenetwork activation security issue

Status:	CLOSED FIXED

Product:	MySqueezebox.com
Classification:	Unclassified
Component:	Web UI
Version:	unspecified
Platform:	All All

Importance:	P2 normal (vote)
Target Milestone:	---
Assigned To:	Andy Grundman

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2005-08-29 10:26 UTC by Kevin Pearsall
Modified:	2008-12-15 12:14 UTC (History)
CC List:	0 users

See Also:
Category:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Kevin Pearsall 2005-08-29 10:26:06 UTC

if you log out of squeezenetwork and use the URL in the activation e-mail, you
can always get in to your account without a password.

the activation url should only work once to prevent this.

Comment 1 Andy Grundman 2006-01-19 12:43:37 UTC

Fixed in trunk, the activation code is now cleared after a successful login.

Comment 2 James Richardson 2008-12-15 12:14:30 UTC

This bug has been fixed in the latest release of SqueezeNetwork!

If you are still experiencing this problem, feel free to reopen the bug with your new comments and we'll have another look.