New issue
Advanced search Search tips

Issue 788140 link

Starred by 2 users

Issue metadata

Status: Duplicate
Merged: issue 786312
Owner:
Closed: Nov 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: ----
Type: Bug



Sign in to add a comment

Security: Showing password after deleting another one

Reported by jur...@jurjendevries.com, Nov 23 2017

Issue description

VULNERABILITY DETAILS
A hidden password is made visible automatically after deleting another password

VERSION
Chrome Version: 62.0.3202.82 (Official Build) (64-bit) stable
Operating System: Chrome OS 9901.66.0 (Official Build) stable-channel zako

REPRODUCTION CASE
1. Settings
2. Passwords and forms > Manage passwords (Offer to save your web passwords)
3. You need at least 2 'saved passwords' here. Make the first row visible by clicking the eye icon
4. Delete the first row by clicking the three dots > remove
Now you will see the password of the next record while you didn't click the eye icon.
 
Components: UI>Browser>Passwords
Labels: -Type-Bug-Security -Restrict-View-SecurityTeam OS-Chrome Type-Bug
Status: Available (was: Unconfirmed)
Yes, can repro in latest stable channel. Though it is a functional bug rather than a security bug. 

Comment 2 by battre@chromium.org, Nov 24 2017

Owner: jdoerrie@chromium.org
Status: Assigned (was: Available)
Mergedinto: 786312
Status: Duplicate (was: Assigned)

Sign in to add a comment