Back to search
CVE-2019-13098
Published: Jul 22, 2019
Modified: Aug 4, 2024
PUBLISHED
Description
The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called. Other authenticated users can read it in the log later. The logged data can be read using Logcat on the device. When using platforms prior to Android 4.1 (Jelly Bean), the log data is not sandboxed per application; any application installed on the device has the capability to read data logged by other applications.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://pastebin.com/a5VhaxYn
x_refsource_MISC
https://pastebin.com/raw/rVGbwSw0
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now