Security: Authentication Bypass for non admin users
Reported by
swif...@gmail.com,
Jun 19 2017
|
|||||
Issue descriptionThis template is ONLY for reporting security bugs. If you are reporting a Download Protection Bypass bug, please use the "Security - Download Protection" template. For all other reports, please use a different template. Please READ THIS FAQ before filing a bug: https://www.chromium.org/Home /chromium-security/security-faq Please see the following link for instructions on filing security bugs: http://www.chromium.org/Home/chromium-security/reporting-security-bugs NOTE: Security bugs are normally made public once a fix has been widely deployed. VULNERABILITY DETAILS Please provide a brief explanation of the security issue. When Installing Chrome on Windows 10 without admin privileges the install will fail and let user know that they need admin rights to install. However it prompts to try again, and without requiring admin rights it bypasses the authentication and installs. VERSION Chrome Version: [59.0.3071.104] + [stable] Operating System: [WIN10, Latest, and Creator Edition] REPRODUCTION CASE Please include a demonstration of the security bug, such as an attached HTML or binary file that reproduces the bug when loaded in Chrome. PLEASE make the file as small as possible and remove any content not required to demonstrate the bug. FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION Type of crash: [tab, browser, etc.] Crash State: [see link above: stack trace, registers, exception record] Client ID (if relevant): [see link above]
,
Jun 19 2017
If you attempt to install ChromeSetup.exe on Windows 10, you first see a prompt for Administrative credentials from Windows. If you decline that prompt, you'll see a prompt: "Google Chrome can be installed without administrator privileges. Continue? [Yes] [No]" If you choose "Yes", Chrome will install on a per-user basis (installed only for the current user, not other users on the PC). Such behavior is working as intended. Can you please confirm that this is what you saw?
,
Jun 21 2017
Doesn't seem to be a security issue. Marking as WontFix due to a lack of response.
,
Sep 28 2017
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Jul 24
The reported behaviour remains the same until now (67.0.3396.99). A policy to block non-administrative installations would solve the issue for those organisations that want to deny their users self-installations but rather use their own software deployment methods.
,
Jul 24
Google Update has Group Policy controls to allow/deny app installation, but none to limit installs to per-machine only. Assigning to Sorin to comment on whether there's another way to restrict per-user installs of Chrome, and whether or not his team sees this as an interesting feature request. Thanks. |
|||||
►
Sign in to add a comment |
|||||
Comment 1 by elawrence@chromium.org
, Jun 19 2017Labels: OS-Windows