Issue metadata
Sign in to add a comment
|
Security: Passwords leaks
Reported by
qualidad...@gmail.com,
Feb 19 2018
|
||||||||||||||||||
Issue descriptionVULNERABILITY DETAILS This vulnerability directly affects the leak of passwords saved in the Chrome browser. VERSION Versão 64.0.3282.167 (Versão oficial) 64 bits Operating System: Windows 10 Home 64bit - version 1709 - compilation 16229.248 REPRODUCTION CASE The vulnerability occurs when anyone who accesses the logged-in chrome can discover the password saved in the browser. Details: When you are in the login page, the password is hidden by asterisks (******), but if you right-click on the password and then click on inspect, it is possible to change the format password "to" text ", so that any password can be viewed without entering the password of the computer (as usually requested in the password management page of the chrome). That's it, count on me to take any questions.
,
Feb 20 2018
I understand, I read the article and I agree that there are other sources in which we can obtain the password without being the one I described, but the one I cited is much easier and more accessible to most average users, thus increasing the incidence of violations. So it is a very serious fault for being so easy.
,
May 29 2018
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||
Comment 1 by och...@chromium.org
, Feb 19 2018