New issue
Advanced search Search tips

Issue 596297 link

Starred by 1 user
Status: WontFix
Owner: ----
Closed: Mar 2016
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug-Security



Sign in to add a comment

Password

Reported by leo89...@gmail.com, Mar 20 2016 
UserAgent: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36

Steps to reproduce the problem:
1. chrome://settings/passwords 
2. mostrar senhas dos clientes memorizadas
3. 

What is the expected behavior?
que ele não mostre bloquei todos os passwords

What went wrong?
mostrar senhas dos clientes memorizadas

Did this work before? N/A 

Chrome version: 49.0.2623.87  Channel: stable
OS Version: 6.0 (Windows Vista, Windows Server 2008)
Flash Version: Shockwave Flash 21.0 r0

Comment 1 by mea...@chromium.org, Mar 20 2016

Labels: -Restrict-View-SecurityTeam
Status: WontFix (was: Unconfirmed)
Please see this link as to why this isn't a vulnerability:
https://www.chromium.org/Home/chromium-security/security-faq#TOC-Why-aren-t-physically-local-attacks-in-Chrome-s-threat-model- as to why this isn't a vulnerability.

Comment 2 Deleted

Comment 3 by leo89...@gmail.com, Mar 20 2016 

Então eu estou num  local público tipo minha faculdade e uma pessoa com conhecimentos  em programação digita esse paramento-chrome://settings/passwords  e vê  senhas salvas de pessoas leigas eu mesmo já conseguir senhas  de banco e e-mails com esse comando e vocês me dizem que isso não é vulnerabilidade

Comment 4 by mea...@chromium.org, Mar 21 2016 

Translation:

"So I'm in a public place like my college and a person with knowledge of programming this type vestment-chrome: // settings / passwords and view saved passwords laypeople myself already get bank passwords and e-mails with this command and you I say this is not vulnerable"

Yes, please do not enter private information on a public computer that you don't trust. Comment #2 on this link explains the problem in detail: https://bugs.chromium.org/p/chromium/issues/detail?id=576114#c2
Project Member

Comment 5 by sheriffbot@chromium.org, Oct 1 2016 

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 6 by sheriffbot@chromium.org, Oct 2 2016 

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 7 by mbarbe...@chromium.org, Oct 2 2016

Labels: allpublic
►

Sign in to add a comment