New issue
Advanced search Search tips

Issue 790949 link

Starred by 2 users

Issue metadata

Status: Duplicate
Merged: issue 126398
Owner: ----
Closed: Dec 2017
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Chrome - option to view any stored password

Reported by maciejki...@gmail.com, Dec 1 2017

Issue description

Hi 

There is an option to restore any password stored in "password manager" without knowledge about master password. In normal way user need to provide system password when click on "show password" button. 

Steps to restore password:
1. open url which has stored password in password manager
2. provide login and let chrome to prefill password field
3. open context menu on password field
4. change type from password to text
In this case password field should be clean up

As far as I know it works in any chrome version.

Best
Maciej Kiner
 
Labels: -Restrict-View-SecurityTeam
Status: WontFix (was: Unconfirmed)
We don't consider this to be a security issue. Please see our FAQ for more information: https://chromium.googlesource.com/chromium/src/+/master/docs/security/faq.md#what-about-unmasking-of-passwords-with-the-developer-tools.
Mergedinto: 126398
Status: Duplicate (was: WontFix)
Project Member

Comment 3 by sheriffbot@chromium.org, Mar 10 2018

Labels: allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment