New issue
Advanced search Search tips

Issue 610104 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: May 2016
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Saved Passwords

Reported by verma.an...@gmail.com, May 7 2016

Issue description

This template is ONLY for reporting security bugs. If you are reporting a
Download Protection Bypass bug, please use the "Security - Download
Protection" template. For all other reports, please use a different
template.

Please see the following link for instructions on filing security bugs:
http://www.chromium.org/Home/chromium-security/reporting-security-bugs


VULNERABILITY DETAILS
Save passwords can be seen without logging in chrome by selecting the save password on site and choosing inspect option and then by editing codes by HTML editor

VERSION
Chrome Version: Version 50.0.2661.94 m (64-bit)
Operating System: Windows 10

REPRODUCTION CASE
Please include a demonstration of the security bug, such as an attached
HTML or binary file that reproduces the bug when loaded in Chrome. PLEASE
make the file as small as possible and remove any content not required to
demonstrate the bug.

FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION
Type of crash: [tab, browser, etc.]
Crash State: [see link above: stack trace, registers, exception record]
Client ID (if relevant): [see link above]

 
Screenshot (14).png
1011 KB View Download

Comment 1 by f...@chromium.org, May 9 2016

Thanks for the report!

Hiding the passwords with dots is actually just a convenience feature, to prevent people standing behind you from seeing what you're typing. It isn't a security feature. You can learn more about how it works here: https://www.chromium.org/Home/chromium-security/security-faq#TOC-What-about-unmasking-of-passwords-with-the-developer-tools-

Comment 2 by f...@chromium.org, May 9 2016

Labels: -Restrict-View-SecurityTeam
Status: WontFix (was: Unconfirmed)
Project Member

Comment 3 by sheriffbot@chromium.org, Oct 1 2016

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 4 by sheriffbot@chromium.org, Oct 2 2016

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: allpublic

Sign in to add a comment