Issue metadata
Sign in to add a comment
|
Security: bypass dev mode block on Chromebook
Reported by
32299...@gmail.com,
Sep 19 2016
|
||||||||||||||||||||||||
Issue descriptionThis template is ONLY for reporting security bugs. If you are reporting a Download Protection Bypass bug, please use the "Security - Download Protection" template. For all other reports, please use a different template. Please see the following link for instructions on filing security bugs: http://www.chromium.org/Home/chromium-security/reporting-security-bugs NOTE: Security bugs are normally made public once a fix has been widely deployed. VULNERABILITY DETAILS Please provide a brief explanation of the security issue. VERSION Chrome Version: any] + [any Operating System: [Please indicate OS, version, and service pack level] REPRODUCTION CASE Please include a demonstration of the security bug, such as an attached HTML or binary file that reproduces the bug when loaded in Chrome. PLEASE make the file as small as possible and remove any content not required to demonstrate the bug. Install chrome 36 on a chromebook using recovery. Then one sets the chromebook into recovery and then dev mode at boot after recovery. Then one enters developer mode and FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION Type of crash: [tab, browser, etc.] Crash State: [see link above: stack trace, registers, exception record] Client ID (if relevant): [see link above]
,
Sep 19 2016
Please provide full reproduction instructions and vulnerability details.
,
Sep 19 2016
1. Install chrome 36 or older on chromebook 2. Go into dev mode. 3. If the chromebook has dev mode blocked for some reason, the user can bypass this. 4. The user can do virtually whatever they want at this point. This allows a user to enter dev mode, when he/she is not athourized to do so.
,
Sep 19 2016
,
Sep 19 2016
Thanks for the report, looks like this is a duplicate, so we will investigate.
,
Sep 20 2016
,
Jan 12 2017
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||||
Comment 1 by elawrence@chromium.org
, Sep 19 2016Labels: OS-Chrome
Summary: Security: bypass dev mode block on Chromebook (was: Security: bypass dev mode block)