New issue
Advanced search Search tips

Issue 848838 link

Starred by 1 user

Issue metadata

Status: Duplicate
Owner: ----
Closed: Jun 2018
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security:

Reported by supp...@shopbattledash.com, Jun 1 2018

Issue description

VULNERABILITY DETAILS
Exploit I found on how to get Guest mode on a managed Chromebook with no Guest Mode permission.

VERSION
Chrome Version: [65.0.3325.209 (Official Build) (64-bit)] + [stable]
Operating System: Chrome OS, 10323.67.0 (Official Build) stable-channel candy

REPRODUCTION CASE
Press Esc+Refresh+Power (Recovery) and then Ctrl+D, after that press space, then enter. That should enable verified mode again. once it reboots to the setup screen connect to WiFi, it should say something about sending usage data to Google. Click accept, right when the loading screen comes up go to the bottom right of the taskbar and disable WiFi. It will keep loading for a minute or so then a screen will pop up asking you to connect to a new network or "Use Guest Mode". Select use guest mode and it works, no policies and Crosh.

Hope I helped, I'm just trying to make some money.

Sincerely,
Sean Kahler
support@shopbattledash.com
 
Mergedinto: 848837
Status: Duplicate (was: Unconfirmed)
Project Member

Comment 2 by sheriffbot@chromium.org, Sep 8

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment