Issue metadata
Sign in to add a comment
|
Security: Opera Browser takes over Chrome sessions
Reported by
tobias.f...@gmail.com,
Mar 15 2016
|
||||||||||||||||||
Issue descriptionAfter installing Opera Browser with a Chrome Browser installed on my PC, Opera was able to take over all current sessions from my Chrome browser: I was auto logged in in Google, Facebook. VULNERABILITY DETAILS I have been using the same Windows user profile. I am logged in to Google Chrome using my Google account. Synchronization of passwords and bookmarks is enabled. I personally don't want to allow any software using the Blink engine to access these session details stored in Chrome browser. Therefore, I suppose this behaviour as a security bug. VERSION Chrome Version: 48.0.2564.116 m Opersa Version: 35.0.2066.92 Operating System: Microsoft Windows 10 Education Edition, 64 bit REPRODUCTION CASE To reproduce the case, I need to install Google Chrome and to initialize a few sessions on services like Google, Facebook or others. Next I install Opera browser and open it after the installation process succeeded. Opening the websites above, results in logged in sessions.
,
Mar 16 2016
I can confirm that this is intended behaviour on Opera's part. On first start, Opera imports the session, cookies and other data to make the transition from whichever browser was set as default as seamless as possible.
,
Oct 1 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 2 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 2 2016
|
|||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||
Comment 1 by mea...@chromium.org
, Mar 15 2016Status: WontFix (was: Unconfirmed)