New issue
Advanced search Search tips

Issue 617372 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Jun 2016
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug



Sign in to add a comment

Security: See every saved password in very easy way

Reported by tuananhd...@gmail.com, Jun 4 2016

Issue description

This template is ONLY for reporting security bugs. If you are reporting a
Download Protection Bypass bug, please use the "Security - Download
Protection" template. For all other reports, please use a different
template.

Please see the following link for instructions on filing security bugs:
http://www.chromium.org/Home/chromium-security/reporting-security-bugs


VULNERABILITY DETAILS
With a small change in code, you can see saved password on PC and Laptop

VERSION
Chrome Version: Version 51.0.2704.79 m
Operating System: [Windows, 8.1, and service pack level 2]

REPRODUCTION CASE
As you can see in picture, with a small change in a code. I can have a password which protected in settings. So please do something to make this not happen in the future version of Chrome. If not, anyone can lose their private password easily by anyone have their laptop or PC



 

Comment 1 by f...@chromium.org, Jun 5 2016

Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug
Status: WontFix (was: Unconfirmed)
Hi, thanks for the report. 

You should be careful with who you allow on your computer. Anyone with unsupervised access to your unlocked computer can get your passwords, in Chrome and other browsers too. You can find an explanation of this in our FAQ: https://www.chromium.org/Home/chromium-security/security-faq#TOC-What-about-unmasking-of-passwords-with-the-developer-tools-

Sign in to add a comment