#20096: Wireless configuration may update the WiFi key to router's login
password
-------------------------------------------------+-------------------------
Reporter: gvalkov | Owner: developers
Type: defect | Status: new
Priority: high | Milestone: Chaos
Component: packages | Calmer (trunk)
Keywords: saved login password LuCI wireless | Version: Trunk
key administration |
-------------------------------------------------+-------------------------
Saved administration site user and pass may appear on the Wireless
configuration page. As shown on the attached image, the '''create'''
Network field is automatically filled with the user name '''root''', while
the Key contains my password. Pressing Save & Apply will replace the Key.
Router connectivity is lost until the correct Key is configured over LAN
cable. The workaround is to always re-enter the original Key, every time I
need to update a setting.
Affected browser: Google Chrome.
Requires that the LuCI user and pass are saved on the browser.
Analysing the web page source code shows that both fields use the same
'''class="cbi-input-password"''':
{{{
<input class="cbi-input-password" type="password" name="luci_password" />
<input type="password" class="cbi-input-password"
onchange="cbi_d_update(this.id)" name="cbid.wireless.cfg073579._wpa_key"
id="cbid.wireless.cfg073579._wpa_key" value="********" />
}}}
--
Ticket URL: <https://dev.openwrt.org/ticket/20096>
OpenWrt <http://openwrt.org>
Opensource Wireless Router Technology
_______________________________________________
openwrt-tickets mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-tickets
