New issue
Advanced search Search tips

Issue 654294 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Oct 2016
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Two Problems

Reported by whowasin...@gmail.com, Oct 9 2016

Issue description

Good Afternoon Google, I am here to report a bug in the google homepage.

1.Go to the chrome web store and download any theme.
2.Open the developer tools and follow the google identification into permanent google log.
3.Reveal all of the passwords and you can use them to enter any publicly saved account on the server.

Attack Situation:
1.They enter the account.
2.They transfer any user money into another place.

Another bug with the homepage:
1.Once again go to the google log and delete all information.
2.Save changes in the log and now the page is unrecognizable.
 
Labels: -Restrict-View-SecurityTeam
Status: WontFix (was: Unconfirmed)
Using the Chrome Developer tools to reveal your own passwords is not a security vulnerability; this is discussed in the Chrome Security FAQ; please see https://www.chromium.org/Home/chromium-security/security-faq#TOC-What-about-unmasking-of-passwords-with-the-developer-tools- for more details.

Bugs in Google Search and related websites are not tracked in the Chrome bug tracker; they are instead reported via clicking Settings > Send Feedback at the bottom right of the Search homepage or by using the Send Feedback tool. https://www.google.com/tools/feedback/intl/en/

Sign in to add a comment