New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 890667 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Oct 5
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Netflix and saved passwords on Chrome

Reported by mr7s...@gmail.com, Oct 1

Issue description

VULNERABILITY DETAILS
I think I found an issue. 
Me and my dad live in the same house and I use his Comcast internet.
I use his Netflix account on my phone and desktop computer. Especially on Chrome.
He changed his password (he says well over last week ago) (also, i didnt know he changed the password, he does this sometimes)

This is whats weird

Ive been logging into Netflix from home computer on his old password on Chrome ever since he changed the password. Ive had it on auto password and it logs right in. 

Also, hes been getting alerts from netflix that people are trying to login to his account. Im guessing this is chrome trying to login and hitting with the wrong password from auto password.
Point being, it still logged me in.

Hope this helps.

VERSION
Chrome Version: [x.x.x.x] + [stable, beta, or dev]
Operating System: [Please indicate OS, version, and service pack level]

REPRODUCTION CASE
Please include a demonstration of the security bug, such as an attached
HTML or binary file that reproduces the bug when loaded in Chrome. PLEASE
make the file as small as possible and remove any content not required to
demonstrate the bug.

FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION
Type of crash: [tab, browser, etc.]
Crash State: [see link above: stack trace *with symbols*, registers,
exception record]
Client ID (if relevant): [see link above]

 
Components: Services>Sync
Labels: Needs-Feedback
Thanks for the report.

It's possible that Chrome is syncing the new password and is logging you in with it. Can you please check whether chrome://settings/passwords contains the new password? (And perhaps the old password as well)
Components: UI>Browser>Autofill
Status: WontFix (was: Unconfirmed)
Closing since we haven't heard back from the reporter.
Project Member

Comment 4 by sheriffbot@chromium.org, Jan 12

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment