New issue
Advanced search Search tips

Issue 828417 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Apr 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Feature



Sign in to add a comment

chrome://settings/passwords reveals passwords when no system password is set

Reported by kanse.ut...@gmail.com, Apr 3 2018

Issue description

After using the store passwords in crome
.The crome advanced settings give a direct view of the login ids and password .
if a user using crome for doing online transactions , or for accessing social media and selects the option of store my password. then a any unauthorised person can view the users login details in following link 
In   chrome://settings/passwords
these link the any person can see stored passwords in the google crome
this issue is in Version 65.0.3325.181 (Official Build) (32-bit) of the crome browser poerating on the windows 7 professional service pack 1 
My PC does not contain any Login password but the crome should use  some security mechanism such as captcha , or some questions to avoid the misuse of users data  


Warnings:
Security_Severity should be set on security bugs
Security_Impact should be set on security bugs
 
Components: UI>Browser>Passwords UI>Browser>WebUI
Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Needs-Feedback Type-Bug
Summary: chrome://settings/passwords reveals passwords when no system password is set (was: Security: )
Please provide an exact step-by-step list of instructions that demonstrate this issue (screen-recording a video may help). 

On Windows, Chrome *should* be prompting for the system password (the first time) when unmasking passwords on this page. Note that this prompt is not a security feature (see e.g. https://textslashplain.com/2017/10/16/stealing-your-own-password-is-not-a-vulnerability/).

Labels: -Type-Bug Type-Feature
Status: WontFix (was: Unconfirmed)
We don't need a screen-recording. This is working as designed. You need to setup an OS password in order to be asked for that in chrome://settings/passwords.

Sign in to add a comment