New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 648245 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 645732
Owner: ----
Closed: Sep 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: bypass dev mode block on Chromebook

Reported by 32299...@gmail.com, Sep 19 2016

Issue description

This template is ONLY for reporting security bugs. If you are reporting a
Download Protection Bypass bug, please use the "Security - Download
Protection" template. For all other reports, please use a different
template.

Please see the following link for instructions on filing security bugs:
http://www.chromium.org/Home/chromium-security/reporting-security-bugs

NOTE: Security bugs are normally made public once a fix has been widely
deployed.

VULNERABILITY DETAILS
Please provide a brief explanation of the security issue.

VERSION
Chrome Version: any] + [any
Operating System: [Please indicate OS, version, and service pack level]

REPRODUCTION CASE
Please include a demonstration of the security bug, such as an attached
HTML or binary file that reproduces the bug when loaded in Chrome. PLEASE
make the file as small as possible and remove any content not required to
demonstrate the bug.
Install chrome 36 on a chromebook using recovery. Then one sets the chromebook into recovery and then dev mode at boot after recovery. Then one enters developer mode and 

FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION
Type of crash: [tab, browser, etc.]
Crash State: [see link above: stack trace, registers, exception record]
Client ID (if relevant): [see link above]

 
Components: Enterprise
Labels: OS-Chrome
Summary: Security: bypass dev mode block on Chromebook (was: Security: bypass dev mode block)
Cc: kerrnel@chromium.org
Status: WontFix (was: Unconfirmed)
Please provide full reproduction instructions and vulnerability details.

Comment 3 by 32299...@gmail.com, Sep 19 2016

1. Install chrome 36 or older on chromebook
2. Go into dev mode.
3. If the chromebook has dev mode blocked for some reason, the user can bypass this.
4. The user can do virtually whatever they want at this point.
This allows a user to enter dev mode, when he/she is not athourized to do so.

Comment 4 by wfh@chromium.org, Sep 19 2016

Mergedinto: 645732
Status: Duplicate (was: WontFix)
Thanks for the report, looks like this is a duplicate, so we will investigate.

Comment 6 by wfh@chromium.org, Sep 20 2016

Cc: scunning...@chromium.org
Project Member

Comment 7 by sheriffbot@chromium.org, Jan 12 2017

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment