New issue
Advanced search Search tips

Issue 594893 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 587685
Owner: ----
Closed: Mar 2016
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: no 2 factor authentication on Chrome OS

Reported by anas...@gmail.com, Mar 15 2016

Issue description




VULNERABILITY DETAILS
Accounts using 2 factor authentication only requires the google password to sign into Chrome OS

VERSION
Version 48.0.2564.116 (64-bit)
Platform 7647.84.0 (Official Build) stable-channel quawks
Firmware Google_Quawks.5216.204.32

REPRODUCTION CASE
When a Google account has 2 factor authentication set up with One Login and Duo Mobile, you can still sign into Chrome OS using only the Google account's password. 

 

Comment 1 by mea...@chromium.org, Mar 15 2016

Components: UI>Browser>Profiles
Labels: -Restrict-View-SecurityTeam
Mergedinto: 587685
Status: Duplicate (was: Unconfirmed)
Thanks, same bug is reported a while back at bug 587685, merging.
Labels: allpublic

Sign in to add a comment