New issue
Advanced search Search tips

Issue 809890 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Feb 2018
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Unexpectedly signed into Chrome after using webplwiz

Reported by jeromest...@gmail.com, Feb 7 2018

Issue description

This template is ONLY for reporting security bugs. If you are reporting a
Download Protection Bypass bug, please use the "Security - Download
Protection" template. For all other reports, please use a different
template.

Please READ THIS FAQ before filing a bug: https://chromium.googlesource.com
/chromium/src/+/master/docs/security/faq.md

Please see the following link for instructions on filing security bugs:
https://www.chromium.org/Home/chromium-security/reporting-security-bugs

NOTE: Security bugs are normally made public once a fix has been widely
deployed.

VULNERABILITY DETAILS
Please provide a brief explanation of the security issue.

VERSION
Chrome Version: Version 64.0.3282.119 (Official Build) (64-bit) + [stable, beta, or dev] ? stable i think.
Operating System: win 10 vers 1709

REPRODUCTION CASE
login to chrome via google login, create new windows user via webplwiz windows app, login as new user, delete other windows user, open chrome, you will see you are still logged in as whoever you were in the old windows account.

FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION
none

 
Components: UI>Browser>Profiles
Labels: Needs-Feedback OS-Windows
Summary: Security: Unexpectedly signed into Chrome after using webplwiz (was: Security: issue)
The issue described sounds like a functional bug in Windows rather than a bug in Chrome, however, there's not really enough detail to reproduce this.

What is the "webplwiz windows app" and where did you find it?

When you say "login to chrome via google login" do you mean that you create a new profile in Chrome and use a Google account to enable sync?

How specifically did you determine that "you are still logged in as whoever you were"?

Status: WontFix (was: Unconfirmed)
Closing due to lack of response.
Project Member

Comment 3 by sheriffbot@chromium.org, May 18 2018

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment