Anyone can access all the stored password without any authentication on google chrome. In windows when we want to access the password we must enter the password of system but in chrome OS we can access store password without authentication.
Steps to reproduce:
1.go to chrome://settings/passwords
2.Select any user from save password window. Password is hide. Click show button in password section.
3. password show without any authentication.
Browser/OS: C
OS: Chrome OS
Version 56.0.2924.110 (64-bit)
Platform 9000.91.0 (Official Build) stable-channel kip
Firmware Google_Kip.5216.227.78
|
Deleted:
Settings - Passwords.pdf
80.2 KB
|
|
|
Settings - Passwords.pdf
80.2 KB
Download
|
Comment 1 by elawrence@chromium.org
, Feb 26 2017Labels: -Restrict-View-SecurityTeam allpublic OS-Chrome OS-Linux
Mergedinto: 672451
Status: Duplicate (was: Unconfirmed)
Summary: Password Manager does not demand authentication on ChromeOS (was: Login-information (password) show without authentication. )