New issue
Advanced search Search tips

Issue 774888 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 126398
Owner: ----
Closed: Oct 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Steal password using developer tools

Reported by evanl...@gmail.com, Oct 16 2017

Issue description

Hello, I'm using the current version of Chrome and I've seen that there is a bug that shows passwords saved by users through the source code, whether the attacker is in front of the machine or even a remote invasion. For the attacker to see the password is extremely easy, simply put the mouse in the password field, right-click and go to inspect. This will open the code inspection window. Now just find the password field and change to text and press enter. Ready!! The password is revealed. I'm attaching an image with the steps.
Sorry, I do not speak English and the text has been translated into Google Translator ..
. Thank you.
 
Mergedinto: 126398
Status: Duplicate (was: Unconfirmed)
Summary: Security: Steal password using developer tools (was: Security: bug chrome)
"Stealing" your own password does not represent a security vulnerability. 

https://chromium.googlesource.com/chromium/src/+/master/docs/security/faq.md#What-about-unmasking-of-passwords-with-the-developer-tools
Components: Blink>Forms>Password
Labels: -Restrict-View-SecurityTeam allpublic

Sign in to add a comment