New issue
Advanced search Search tips

Issue 806190 link

Starred by 2 users
Status: WontFix
Owner: ----
Closed: Jan 2018
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: ----
Type: Bug-Security



Sign in to add a comment

Unexpected cached credentials appear

Reported by mmauli...@gmail.com, Jan 26 2018 


VULNERABILITY DETAILS
Don't know this is security issue or autocomplete is doing this but this shoplexxa account seems vulnerable. I'm having login credentials of someone else on my phone? How's that possible. I've never created this. I have attached screenshot of that. When i went to reddit log in. I got that. I haven't yet verified anything. But this seemed doubtful. Let me Know if i can help on same.

VERSION
Chrome Version: 64.0.3282.116
Operating System: [Android]

REPRODUCTION CASE
I can always get this as of now. I don't know how it came from. As far as i know i haven't created such account.
Screenshot_20180126-133435.png
72.6 KB View Download

Comment 1 by elawrence@chromium.org, Jan 26 2018

Labels: Needs-Feedback OS-Android
Summary: Unexpected cached credentials appear (was: Security: i just got someone else's login credentials automatically appearing in login text box when i opened reddit.)
When you click the "dot dot dot" menu at the top right and click "Settings", does it show that you're signed into Chrome? If so, to what email address are you Sync'ing? If it's a Google account, may we have permission to examine your sync logs? In addition to your permission to examine our logs on the server to determine what happened, could I also ask you for:
1. A screenshot of chrome://signin-internals on the phone
2. A screenshot of chrome://sync-internals on the phone


In most report like this, we find that the user has at some point logged into Chrome on a different computer and begun syncing the data previously stored on that computer into their Chrome account.

Comment 2 by mea...@chromium.org, Jan 29 2018

Status: WontFix (was: Unconfirmed)
Closing since we didn't hear back from the reporter.

mmaulik13: Please let us know if you can provide more information.
Project Member

Comment 3 by sheriffbot@chromium.org, May 8 2018

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment