New issue
Advanced search Search tips

Issue 774375 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 126398
Owner: ----
Closed: Oct 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Unmask passwords with the developer tools

Reported by ethan.e0...@gmail.com, Oct 13 2017

Issue description



VULNERABILITY DETAILS
Autofill Password problem with Chrome

I'm able to unmask the dots of the password, by "developer mode" and edit the code that says, "Password" to "Text" in developer mode, after i have highlighted the text and right clicked and hit "inspect or inspect element. 
Then I am able to see that persons password. After that i can edit the word "text" back to "Password" and the autofill goes back to the dots.
I have attached screenshots of what i mean.

Thanks,

Ethan.


VERSION
Chrome Version: 61.0.3163 stable
Operating System: Win7,8,10, All Mac OS's all service pack levels.

REPRODUCTION CASE
I have attached screenshots of what is going on in the developer mode. 



 
changed back to word-password.JPG
57.6 KB View Download
Chrome Password change to--Text.JPG
154 KB View Download
Chrome Password.JPG
160 KB View Download
Chrome version 61.0.3163.JPG
16.5 KB View Download
Components: Blink>Forms>Password
Labels: -Restrict-View-SecurityTeam allpublic
Mergedinto: 126398
Status: Duplicate (was: Unconfirmed)
Summary: Unmask passwords with the developer tools (was: Security: Chrome Browser 61.0.363)
https://chromium.googlesource.com/chromium/src/+/master/docs/security/faq.md#What-about-unmasking-of-passwords-with-the-developer-tools

Sign in to add a comment