Package: weboob
version: 1.1-1
Severity: serious

Dear developper,

In the case you configure two backends with boobank, storing the login
but asking for the password (see attached configuration), boobank
reveals the second password.

when you call list, the display is messed up as both backends require a
password on the same line. To login with success, you need to enter the
first password (hidden), then validate, and enter the second password
(not hidden anymore).

Best regards,
Bertrand
[boursorama]
_module = boursorama
device = Boobank
pin_code = 0000
login = XXXXXXXX
password = 
enable_twofactors = True

[banquepopulaire]
_module = banquepopulaire
website = www.ibps.loirelyonnais.banquepopulaire.fr
login = XXXXXX
password = 

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to