Another Data Leak Across Multiple Chrome Profiles

mikeyh

Save New Login... is pulling random data from other Chrome profiles in what should be sandboxed instances: eg

• websites
• saved form details

Open multiple chrome profiles with different websites then use Save New Login.

eg saving secure details from one client into a client specific teams account vault added website URLs and form data from another client open in a separate Chrome profile (person) that should have been fully isolated.

For history see:

• https://discussions.agilebits.com/discussion/89770/data-leak-across-multiple-chrome-profiles-fixed-in-beta-16
• https://discussions.agilebits.com/discussion/90622/fill-weak-matching-may-paste-username-email-into-random-input-text-field

---

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided

rudy

@mikeyh,

Thanks for the report, I've created an issue to address this and will be working on the necessary changes today.

jpgoldberg

Hey, @rudy, please tag the issue with "Security" if you haven't already done so.

mikeyh

Do we have an update on this issue?

AGAlumB

No update at this point in the beta, but I know Rudy is looking into it.