Safari 9.0: Accounts clobbered in iCloud Keychain on sites with multiple users

Originator:tomwinzig
Number:rdar://21854599 Date Originated:16-Jul-2015 07:59 AM
Status:Open Resolved:
Product:Safari Product Version:Safari 9.0 (11601.1.37.1)
Classification:UI/Usability Reproducible:Sometimes
 
If I’m using a site where I have multiple accounts (e.g. Amazon, where I have an AWS account and a shopping account), and I go to update my password on a page where I’m not also updating the username at the same time, Safari can sometimes clobber (overwrite) the passwords of the other accounts on the site that I’m not currently logged in with.

It seems like if Safari sees multiple usernames listed in iCloud Keychain for a single site (or wildcard domain update), then it should prompt the user to ask them which username is having the password updated.

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!