Issue metadata
Sign in to add a comment
|
Security: The problem is once once you have lost your phone or when some once else took your phone (with secure screen lock) google lets you know the email id by forgot password feature once you get the email id and with the forgot password feature(on another platform say,chrome) google sents the otp to this same phone once this otp is know the intruder can log in to owner's email id and thereby getting access to both phone and email id
Reported by
abinalex...@gmail.com,
Jul 27
|
||||||||||||||||||
Issue descriptionThis template is ONLY for reporting security bugs. If you are reporting a Download Protection Bypass bug, please use the "Security - Download Protection" template. For all other reports, please use a different template. Please READ THIS FAQ before filing a bug: https://chromium.googlesource.com /chromium/src/+/master/docs/security/faq.md Please see the following link for instructions on filing security bugs: https://www.chromium.org/Home/chromium-security/reporting-security-bugs NOTE: Security bugs are normally made public once a fix has been widely deployed. VULNERABILITY DETAILS Please provide a brief explanation of the security issue. VERSION Chrome Version: [x.x.x.x] + [stable, beta, or dev] Operating System: [Please indicate OS, version, and service pack level] REPRODUCTION CASE Please include a demonstration of the security bug, such as an attached HTML or binary file that reproduces the bug when loaded in Chrome. PLEASE make the file as small as possible and remove any content not required to demonstrate the bug. FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION Type of crash: [tab, browser, etc.] Crash State: [see link above: stack trace *with symbols*, registers, exception record] Client ID (if relevant): [see link above]
,
Jul 27
Based on the report, this doesn't sound like an issue with the chrome web browser. Vulnerabilities in google services can be reported at https://goo.gl/vulnz though this sounds a bit like https://sites.google.com/site/bughunteruniversity/nonvuln/using-google-account-recovery-to-hijack-test-accounts
,
Nov 3
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||
Comment 1 by abinalex...@gmail.com
, Jul 27