Issue metadata
Sign in to add a comment
|
Security: Download apps through linux beta when extensions and add-ons are blocked
Reported by
djlxlr1...@gmail.com,
Sep 24
|
||||||||||||||||||
Issue descriptionThis template is ONLY for reporting security bugs. If you are reporting a Download Protection Bypass bug, please use the "Security - Download Protection" template. For all other reports, please use a different template. Please READ THIS FAQ before filing a bug: https://chromium.googlesource.com /chromium/src/+/master/docs/security/faq.md Please see the following link for instructions on filing security bugs: https://www.chromium.org/Home/chromium-security/reporting-security-bugs NOTE: Security bugs are normally made public once a fix has been widely deployed. VULNERABILITY DETAILS Please provide a brief explanation of the security issue. VERSION Chrome Version: 70.0.3538.22 + beta Operating System: Chrome OS Samsung chromebook plus REPRODUCTION CASE I have discovered a bug that allows to bypass 3rd party and google monitoring. This especially goes for school run chromebooks which is what I have tested it on and also tested on my personal chromebook signed into my school gsuite that has heavy admin control. I was able to do this by setting up linux beta and downloading firefox with command "sudo apt-get install firefox-esr." This allowed me to bypass 3rd party software goguardian which is meant to block and monitor websites and videos. This allows software to be downloaded even though extensions and add-ons are blocked in gsuite by the school.
,
Jan 1
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||
Comment 1 by mbarbe...@chromium.org
, Sep 24