New issue
Advanced search Search tips

Issue 891580 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Oct 3
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: User profile is in danger

Reported by gorbuno...@gmail.com, Oct 3

Issue description

To obtain information about the chrome user profile, you must copy the folder with all the files and transfer it to the profile of another user. Suppose to access the browser history open tabs saved passwords you only need to copy the folder from C: \ Users \ username \ AppData \ Local \ Google
and transfer to your profile. Please change or encrypt this data so that they are inaccessible when copying. I consider this a sufficient vulnerability and lack of security. Operating systems are practically not protected.
With respect Gorbunov A.A.
Gorbunov.t@gmail.com
 
Status: WontFix (was: Unconfirmed)
Hi, what you are describing is a local attack and outside our threat model. Please see https://chromium.googlesource.com/chromium/src/+/master/docs/security/faq.md#Why-arent-physically_local-attacks-in-Chromes-threat-model for a more detailed explanation. Thanks.
Project Member

Comment 2 by sheriffbot@chromium.org, Jan 10

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment